skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

data-flows

Analyze application data flows and generate annotated Mermaid diagrams.

12|1|Updated Feb 9, 2026
Search Tags:#security#data flow#data mapping#vulnerability analysis#PII#trust boundary
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill data-flows
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: data-flows
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/data-flows
Command: npx skills add https://github.com/florianbuetow/claude-code --skill data-flows

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you visualize and secure how data moves through your application, identifying potential risks and vulnerabilities in its flow.

Core Features & Use Cases

  • Data Flow Mapping: Trace data from its origin (e.g., user input) to its destination (e.g., database).
  • Security Analysis: Identify trust boundary crossings, encryption points, and potential data exfiltration risks.
  • Use Case: Understand how Personally Identifiable Information (PII) enters your system, where it's processed, and how it's stored, ensuring compliance and security.

Quick Start

Map all data flows within the application, focusing on sensitive data.

Frequently Asked Questions about data-flows

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map data flows through an application to identify security vulnerabilities?▼

Data flow mapping traces data from sources like user input to sinks like databases, identifying trust boundary crossings and detecting missing validation, encryption, or sanitization for sensitive PII and credentials.

What is a trust boundary crossing in data flow analysis?▼

A trust boundary crossing in data flow analysis occurs when data moves between trusted and untrusted zones, requiring validation and sanitization to prevent security weaknesses and potential data exfiltration risks.

How do I visualize sensitive PII data movement for compliance and security analysis?▼

You can visualize PII data movement by generating annotated data flow diagrams using Mermaid, mapping exactly where sensitive data enters, is processed, and is stored to ensure compliance and security.

Can I detect missing encryption or sanitization for credentials using data mapping?▼

Yes, data mapping detects security weaknesses by analyzing how credentials and PII traverse trust boundaries, identifying missing encryption, validation, or sanitization at critical transformation points.

What is the best way to trace data exfiltration risks from user input to storage?▼

The best way to trace data exfiltration risks is mapping data flows from origin to destination, analyzing transformations and trust boundary crossings to pinpoint where sensitive data lacks proper protection.

Why does data flow threat analysis focus on sources, sinks, and transformations?▼

Data flow threat analysis focuses on sources, sinks, and transformations because vulnerabilities often emerge where data enters, exits, or changes state, exposing missing security controls like encryption.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-audit-context-building

Map architecture, trust boundaries, and data flows for security audit scoping.

Official
Advanced
Sumeet138Sumeet138
1

threat-mitigation-mapping

Map threats to security controls and compute coverage and defense-in-depth metrics.

Community
Advanced
FrekiManagarmFrekiManagarm

source-command-sparc-security-review

Perform static and dynamic code audits to flag security vulnerabilities.

Community
Advanced
Imad-OuteImad-Oute
2

mh-cto-sdlc-security-arch

Construct security architecture with STRIDE threat modeling and trust boundary definition.

Community
Advanced