skills.rest
wizeline
wizelineOFFICIAL
Explore all skills by this author →
WebsiteGitHub

devsec-designing-security-architecture

Design secure APIs, cloud-native systems, and AI/LLM applications with security patterns.

Updated Aug 27, 2026
Search Tags:#security#microservices#cloud security#zero trust#api security#llm security
One-click install
npx skills add https://github.com/wizeline/sdlc-agents --skill devsec-designing-security-architecture
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: devsec-designing-security-architecture
Source: https://github.com/wizeline/sdlc-agents/tree/main/aicores/security-agent/skills/devsec-designing-security-architecture
Command: npx skills add https://github.com/wizeline/sdlc-agents --skill devsec-designing-security-architecture

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams design secure APIs, cloud-native systems, and AI/LLM applications by providing concrete patterns and configurations to mitigate common security risks.

Core Features & Use Cases

  • API Security: Addresses OWASP API Top 10 risks like BOLA, Broken Authentication, and Rate Limiting.
  • Cloud-Native Security: Implements Zero Trust principles, secrets management, and least-privilege IAM.
  • AI/LLM Security: Mitigates risks like Prompt Injection, Training Data Poisoning, and Excessive Agency.
  • Use Case: A team is building a new microservices-based e-commerce platform and needs to ensure its security architecture is robust against common threats. This Skill provides them with the necessary patterns and best practices.

Quick Start

Act as a security architect and provide a threat model for a new microservices architecture.

Frequently Asked Questions about devsec-designing-security-architecture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design security architecture for microservices?▼

Microservices security architecture requires implementing zero-trust principles, secrets management, and least-privilege IAM to protect distributed services. This provides concrete patterns to secure communication and access across cloud-native systems.

What are the best patterns to mitigate OWASP API Top 10 risks like BOLA?▼

To mitigate OWASP API Top 10 risks like BOLA and Broken Authentication, apply secure authentication, robust authorization checks, and strict rate limiting. These patterns prevent unauthorized data access and API abuse.

How do I prevent prompt injection and excessive agency in LLM applications?▼

Preventing prompt injection and excessive agency in LLM applications requires securing the AI development lifecycle and implementing strict input validation. These measures mitigate LLM-specific threats by constraining model actions.

Can I use this to generate a threat model for a cloud-native e-commerce platform?▼

Yes, you can generate a threat model for a cloud-native e-commerce platform by acting as a security architect. This provides necessary patterns to ensure robust security architecture against common threats.

What is zero trust and how does it apply to cloud security?▼

Zero trust in cloud security enforces strict identity verification and least-privilege access for every user and service. It provides concrete configurations to secure cloud-native systems by eliminating implicit trust.

Related Skills

Explore More Software Engineering Skills→
mahg-esmahg-es
3

secure-arch

Audit system architecture for zero-trust gaps and defense-in-depth weaknesses.

Official
Advanced
sumik5sumik5
2

AUTH-SECRETS

Enforce secure coding practices for authentication, authorization, and secrets management.

Community
Advanced
jeremylongshorejeremylongshore
9

plugin-auditor

Audit plugins for security, best practices, and compliance.

Community
Intermediate
hamzaPixlhamzaPixl
2

security-scan

Scan code repositories and container images for secrets, OWASP Top 10 vulnerabilities, dependency CVEs, and RBAC misconfigurations.

Community
Intermediate