architecture-review

Assess software architectures with C4 diagrams, STRIDE analysis, and WAF pillar evaluations.

Updated Apr 12, 2026
One-click install
npx skills add https://github.com/davidrrowley/CortexYouV3 --skill architecture-review-davidrrowley
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: architecture-review
Source: https://github.com/davidrrowley/CortexYouV3/tree/main/.agents/skills/architecture-review
Command: npx skills add https://github.com/davidrrowley/CortexYouV3 --skill architecture-review-davidrrowley

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides structured, evidence-driven assessments of system architecture to identify design risks, security gaps, scalability limitations, and undocumented decisions that impede reliable delivery and secure operation.

Core Features & Use Cases

  • C4 Diagrams: Produce context and container diagrams to clarify system boundaries and dependencies.
  • Threat Modeling (STRIDE): Identify threats, score risks, and recommend mitigations for external-facing components and data flows.
  • WAF Assessment: Evaluate reliability, security, cost, operations, and performance against Well-Architected Framework pillars.
  • Domain & API Review: Assess bounded contexts, aggregate design, integration patterns, API contracts, and versioning strategies.
  • ADR Candidates & Risk Register: Surface significant decisions with alternatives, recommendations, and a prioritized risks register.
  • Use Case: Use this skill to audit a proposed microservice architecture before implementation, producing diagrams, threat analysis, and ADRs for governance.

Quick Start

Use the architecture-review skill to assess the provided system spec and diagrams and produce C4 context and container diagrams, a STRIDE threat model with mitigations, a WAF pillar assessment, and ADR candidates.

Frequently Asked Questions about architecture-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a threat modeling assessment using STRIDE for a microservice architecture?

Threat modeling with STRIDE identifies threats, scores risks, and recommends mitigations for external-facing components and data flows within your system to ensure secure operation.

What do I need to generate C4 context and container diagrams for a software system?

Generating C4 diagrams requires a system description, non-functional requirements, deployment target, data classification, and any existing diagrams or specs to clarify system boundaries and dependencies.

Can I evaluate API contracts and bounded contexts for a proposed domain-driven design?

Evaluating API contracts and bounded contexts assesses aggregate design, integration patterns, API contracts, and versioning strategies to identify design risks in your domain model.

How do I create ADR candidates and a risk register from a system architecture review?

Architecture reviews surface significant decisions with alternatives, recommendations, and a prioritized risks register to address undocumented decisions that impede reliable delivery.

Does this architecture review evaluate cloud deployments against the Well-Architected Framework?

WAF assessment evaluates reliability, security, cost, operations, and performance against Well-Architected Framework pillars for your specified cloud or on-prem deployment target.

What is the best way to audit a proposed software architecture before implementation?

Auditing a proposed architecture before implementation produces C4 diagrams, STRIDE threat analysis, WAF pillar assessments, and ADR candidates to identify scalability limitations and security gaps.