design-security

Design security infrastructure including authentication, authorization, secrets management, and network controls.

12|1|Updated Mar 23, 2026
One-click install
npx skills add https://github.com/wfukatsu/nexus-architect --skill design-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: design-security
Source: https://github.com/wfukatsu/nexus-architect/tree/main/skills/design-security
Command: npx skills add https://github.com/wfukatsu/nexus-architect --skill design-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill unit tackles the challenge of securing system architecture design, streamlining the integration of essential security practices and principles into your project's DNA.

Core Features & Use Cases

  • Authentication Infrastructure Design: Supports the establishment of secure authentication using OAuth2/OIDC and mTLS.
  • Authorization Model: Offers tools for defining and enforcing role-based or policy-based access controls.
  • Secrets Management: Facilitates secret management using Vault/KMS and outlines rotation strategies.
  • Network Security: Implements zero-trust networking principles and segmentation practices.
  • Audit Log Design: Provides guidelines for the implementation of effective audit logs to ensure accountability.
  • Compliance: Offers a compliance checklist to ensure the security design meets regulatory standards.

Quick Start

Run the /architect:design-security command to initiate the security design process for your architecture.

Frequently Asked Questions about design-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design security architecture for a new system?

To design security architecture, you need to establish authentication, authorization, secrets management, and network security controls. This process provides comprehensive architectural security by integrating frameworks and industry best practices directly into your system design.

What is the best way to implement zero-trust networking in system architecture?

The best way to implement zero-trust networking is to apply segmentation practices within your security architecture design. This approach ensures strict access controls and network security by verifying every request, aligning with modern zero-trust principles.

How do I set up role-based access control for my application?

Setting up role-based access control involves defining an authorization model during your security architecture design. This model enforces access policies based on user roles, ensuring secure resource management across the system.

Does this security architecture design support OAuth2 and mTLS?

Yes, this security architecture design supports OAuth2 and mTLS for authentication infrastructure. It provides structured guidelines to establish secure authentication mechanisms directly within your system's architecture.

Can I use this to design secrets management and rotation strategies?

Yes, you can design secrets management using Vault or KMS, including outlining rotation strategies. This security architecture design component facilitates secure secret handling and ensures long-term credential protection.

How do I ensure my security design meets regulatory compliance standards?

To ensure security design meets regulatory compliance, you should utilize a compliance checklist integrated into the architecture. This verifies that authentication, authorization, and audit logs align with required regulatory standards.