skills.rest
omeraltn
omeraltnCOMMUNITY
Explore all skills by this author →
GitHub

agency-security-engineer

Identify and prioritize security vulnerabilities in web, API, and cloud-native applications.

Updated Apr 11, 2026
Search Tags:#security#vulnerability assessment#threat modeling#incident response#ci-cd#secure code review#dependency auditing
One-click install
npx skills add https://github.com/omeraltn/ice_cream_website_testing --skill agency-security-engineer-omeraltn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agency-security-engineer
Source: https://github.com/omeraltn/ice_cream_website_testing/tree/main/.antigravity/agency-security-engineer
Command: npx skills add https://github.com/omeraltn/ice_cream_website_testing --skill agency-security-engineer-omeraltn

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps engineering teams discover, prioritize, and remediate security vulnerabilities across web, API, and cloud-native applications by integrating security into the development lifecycle and producing actionable, verifiable fixes.

Core Features & Use Cases

  • Threat Modeling: Map architecture, trust boundaries, and STRIDE analysis to prioritize likely attack paths.
  • Secure Code Review & Vulnerability Assessment: Identify OWASP, CWE, injection, authentication/authorization, SSRF, and supply-chain issues with exploitability evidence.
  • CI/CD Hardening & Automation: Add SAST, DAST, SCA, and secrets-scanning gates plus reproducible remediation and verification tests.
  • Cloud & Infrastructure Security: Audit IAM, storage permissions, container configurations, and IaC for misconfigurations and least-privilege violations.
  • Incident Response & Verification: Triage findings, recommend containment steps, and validate remediations with tests and monitoring rules.
  • Use Case: Run a full security assessment for a React/Vite ecommerce frontend and its mock backend to produce a prioritized report with copy-paste remediation and CI checks.

Quick Start

Perform a threat model and prioritized security assessment of the Nordic Creamery web app, listing critical findings with proof of exploitability and copy-paste remediation steps.

Frequently Asked Questions about agency-security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling and security vulnerability assessment for a React/Vite web application?▼

Threat modeling and security vulnerability assessment for React/Vite apps involves mapping architecture and trust boundaries to identify OWASP risks. This Skill applies STRIDE analysis to prioritize attack paths and produces severity-classified findings with concrete remediation steps.

How do I add SAST, DAST, and secrets-scanning gates to a CI/CD pipeline?▼

Adding SAST, DAST, SCA, and secrets-scanning gates to CI/CD pipelines hardens development lifecycles. This Skill generates reproducible remediation steps and CI/CD security configurations to block vulnerable code from reaching production.

What is the best way to audit cloud infrastructure and IAM for least-privilege violations?▼

Auditing cloud infrastructure for least-privilege violations requires reviewing IAM policies, storage permissions, and IaC misconfigurations. This Skill audits container configurations and cloud permissions to identify and fix excessive access rights.

Can this tool review backend API source code for injection and SSRF vulnerabilities?▼

Yes, this Skill conducts secure code review for backend APIs to identify injection, authentication, and SSRF vulnerabilities. It provides exploitability evidence and concrete code snippets to verify and remediate identified CWE issues.

How do I triage security findings and validate remediations with verification tests?▼

Triage security findings by prioritizing containment steps and validating remediations with verification tests. This Skill produces incident response recommendations and monitoring rules to confirm that security fixes effectively close identified vulnerabilities.

Does this security assessment provide exploitability evidence for dependency auditing and supply-chain issues?▼

Yes, dependency auditing identifies supply-chain issues and provides exploitability evidence for affected packages. This Skill prioritizes vulnerabilities and supplies copy-paste remediation steps along with verification tests to secure your application dependencies.

Related Skills

Explore More Software Engineering Skills→
jassicsjassics
6

threat-model-dfd

Generate Data Flow Diagrams with trust boundaries for STRIDE/PASTA threat modeling.

Community
Intermediate
NickCrewNickCrew
29

security-testing-patterns

Identify and mitigate security vulnerabilities in CI/CD pipelines.

Community
Advanced
nickromneynickromney

Setup Security Scanning

Configure security scanning for codebases and CI/CD pipelines.

Community
Advanced
rnavarychrnavarych
14

role-aqa:security-testing

Your response is missing. Please try again.

Community
Advanced