skills.rest
gfcampos1
gfcampos1COMMUNITY
Explore all skills by this author →
WebsiteGitHub

cybersecurity

Identify and mitigate security vulnerabilities in application features during implementation or code review.

Updated Apr 3, 2026
Search Tags:#security#authentication#owasp#input-validation#threat-modeling#code-review#secrets-management
One-click install
npx skills add https://github.com/gfcampos1/my-skills --skill cybersecurity-gfcampos1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cybersecurity
Source: https://github.com/gfcampos1/my-skills/tree/main/skills/cybersecurity
Command: npx skills add https://github.com/gfcampos1/my-skills --skill cybersecurity-gfcampos1

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures security is considered and validated at every step of implementation or code review by identifying attack surfaces, relevant threats, and practical mitigations to prevent vulnerabilities and misconfigurations.

Core Features & Use Cases

  • Threat surface analysis: Identify data flows, trust boundaries, and actors for a feature.
  • OWASP Top 10 mapping: Select applicable threats and generate targeted controls from the OWASP guidance.
  • Auth pattern guidance: Recommend stateless JWT, stateful sessions, OAuth/OIDC, or API key patterns with storage and revocation rules.
  • Secure-coding & deployment checks: Input validation, password hashing, token generation, secure headers, CORS, file upload safety, environment validation, and dependency vulnerability checks.
  • Review checklist & verification: Produce a prioritized, actionable checklist and a final security review to confirm fixes and test coverage.

Quick Start

Use the cybersecurity skill to review the login route and produce a prioritized OWASP-based security checklist with concrete fixes and test suggestions.

Frequently Asked Questions about cybersecurity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map application features to OWASP Top 10 vulnerabilities during code review?▼

OWASP Top 10 mapping identifies applicable threats by analyzing feature data flows, trust boundaries, and actors, generating targeted security controls and prioritized checklists for implementation or code review.

What is the best way to select authentication patterns for API design?▼

Authentication pattern selection evaluates stateless JWT, stateful sessions, OAuth/OIDC, or API key architectures by analyzing trust boundaries, providing storage rules, revocation strategies, and secure token generation guidelines.

How do I perform threat modeling for input validation and file upload safety?▼

Threat modeling for input validation and file uploads identifies attack surfaces and actors, mapping data flows to generate secure-coding checks that prevent misconfigurations and malicious file execution vulnerabilities.

Can I generate a security checklist for CORS and secrets management configuration?▼

Security checklists for CORS and secrets management validate environment configurations, secure headers, and dependency safety by producing actionable, prioritized verification steps to confirm fixes and test coverage.

Does this approach assess deployment configuration and dependency vulnerabilities?▼

Deployment configuration and dependency vulnerability assessments validate environment setup, secure headers, and dependency safety by generating context-specific threat assessments and practical mitigations to prevent misconfigurations.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-audit-context-building

Map architecture, trust boundaries, and data flows for security audit scoping.

Official
Advanced
personamanagmentlayerpersonamanagmentlayer
41

security-expert

Guide application security with OWASP Top 10 mitigation and secure coding practices.

Official
Advanced
n-marusovn-marusov

aif-ci

Generate CI/CD pipeline configurations for GitHub Actions or GitLab CI.

Community
Advanced
florianbuetowflorianbuetow
12

pasta-vulns

Scan code and dependencies for vulnerabilities mapped to CWEs.

Community
Advanced