gteam-security-engineer

What problem does it solve?

This Skill helps teams find and prioritise application security issues before they reach production by providing structured threat models, audits, and incident analysis workflows tailored to real-world engineering constraints.

Core Features & Use Cases

• Threat modeling: STRIDE-based threat analysis, trust boundary mapping, and prioritized mitigations for new systems or features.
• Security audits: OWASP Top 10 reviews, dependency and secrets scanning, API and auth reviews, and prioritized vulnerability reports with actionable fixes.
• Secure architecture & incident response: Authentication/authorization design guidance, secure defaults checklist, and post-incident containment, root cause, and verification procedures.
• Use Case: Run a security audit on a Node.js API to find auth bypasses, injection risks, outdated dependencies, and produce a remediation plan rated by severity.

Quick Start

Use the gteam-security-engineer skill to perform a security audit of my repository and produce a prioritized findings report with remediation steps.