skills.rest
augustoheiss
augustoheissCOMMUNITY
Explore all skills by this author →
GitHub

agency-security-engineer

Identify and remediate application security risks in web and cloud-native systems.

Updated Feb 11, 2026
Search Tags:#ci/cd#owasp#vulnerability assessment#threat modeling#cloud security#application security#secure code review
One-click install
npx skills add https://github.com/augustoheiss/LogicDefense --skill agency-security-engineer-augustoheiss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agency-security-engineer
Source: https://github.com/augustoheiss/LogicDefense/tree/main/.gemini/skills/agency-security-engineer
Command: npx skills add https://github.com/augustoheiss/LogicDefense --skill agency-security-engineer-augustoheiss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams identify and remediate security risks in web and cloud-native applications early in the development lifecycle, reducing the likelihood of breaches and costly incidents.

Core Features & Use Cases

  • Threat Modeling & STRIDE: Map architecture, trust boundaries, and prioritize high-impact threats before code is written.
  • Secure Code Review & Vulnerability Assessment: Focused guidance on OWASP Top 10 and CWE Top 25 issues with concrete, code-level remediation steps.
  • CI/CD & Pipeline Hardening: Recommendations for integrating SAST, DAST, dependency scanning, and secrets detection into automated pipelines.
  • Use Case: Conduct a pre-release security review for an API-based service, produce prioritized findings with remediation, and configure CI checks to prevent regressions.

Quick Start

Run a threat model and prioritized vulnerability assessment for the target web application and deliver a list of critical findings with concrete remediation steps and CI scan recommendations.

Frequently Asked Questions about agency-security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling for web applications and microservices?▼

Threat modeling for web applications involves mapping architecture and trust boundaries to prioritize high-impact STRIDE threats before code is written. This identifies vulnerabilities early in the development lifecycle, reducing breach risks.

How do I conduct an OWASP-focused secure code review?▼

An OWASP-focused secure code review targets the OWASP Top 10 and CWE Top 25 issues. It analyzes source code to identify vulnerabilities and provides concrete, code-level remediation steps to harden application security.

Can I automate vulnerability scanning and secrets detection in CI/CD pipelines?▼

You can harden CI/CD pipelines by integrating SAST, DAST, dependency scanning, and secrets detection into automated workflows. Configuring these CI checks prevents security regressions during software deployment.

Does this provide actionable remediation steps for application security vulnerabilities?▼

Yes, vulnerability assessments produce prioritized findings with concrete, code-level remediation steps. This actionable guidance helps developers resolve security risks in APIs and cloud-native systems efficiently.

What is the best way to prepare for a pre-release security review of an API-based service?▼

The best way to prepare for a pre-release security review is to run threat models and vulnerability assessments on the API service. This delivers prioritized findings with remediation steps and CI scan configurations to prevent regressions.

When should I start integrating application security checks into the development lifecycle?▼

Application security checks should be integrated early in the development lifecycle before code is written. Starting with design reviews and threat modeling reduces the likelihood of costly incidents and breaches downstream.

Related Skills

Explore More Software Engineering Skills→
Imad-OuteImad-Oute
2

mh-cto-sdlc-security-arch

Construct security architecture with STRIDE threat modeling and trust boundary definition.

Community
Advanced
HelloEverybobyHelloEveryboby
17

SDLCOrchestrator

Automate SAST, DAST, and SCA security scans in CI/CD pipelines.

Community
Intermediate
mtsatryanmtsatryan
1

security-engineer

Automates infrastructure security engineering across cloud, container, and DevSecOps environments.

Community
Advanced
4lerman4lerman

senior-security

Perform STRIDE threat modeling and vulnerability analysis with Python scripts.

Community
Advanced