skills.rest
gcampton
gcamptonCOMMUNITY
Explore all skills by this author →
Website𝕏@gcamptonGitHub

gteam-security-engineer

Assess web and API systems for OWASP Top 10 vulnerabilities and misconfigurations.

Updated Aug 23, 2026
Search Tags:#owasp#threat-modeling#security-audit#incident-response#application-security#vulnerability-assessment
One-click install
npx skills add https://github.com/gcampton/GTeam --skill gteam-security-engineer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gteam-security-engineer
Source: https://github.com/gcampton/GTeam/tree/main/specialists/security-engineer
Command: npx skills add https://github.com/gcampton/GTeam --skill gteam-security-engineer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams find and prioritise application security issues before they reach production by providing structured threat models, audits, and incident analysis workflows tailored to real-world engineering constraints.

Core Features & Use Cases

  • Threat modeling: STRIDE-based threat analysis, trust boundary mapping, and prioritized mitigations for new systems or features.
  • Security audits: OWASP Top 10 reviews, dependency and secrets scanning, API and auth reviews, and prioritized vulnerability reports with actionable fixes.
  • Secure architecture & incident response: Authentication/authorization design guidance, secure defaults checklist, and post-incident containment, root cause, and verification procedures.
  • Use Case: Run a security audit on a Node.js API to find auth bypasses, injection risks, outdated dependencies, and produce a remediation plan rated by severity.

Quick Start

Use the gteam-security-engineer skill to perform a security audit of my repository and produce a prioritized findings report with remediation steps.

Frequently Asked Questions about gteam-security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security audit on my web API?▼

An OWASP Top 10 security audit reviews web and API systems to identify vulnerabilities like auth bypasses, injection risks, and misconfigurations, producing a prioritized findings report with actionable remediation steps and verification guidance.

What is STRIDE-based threat modeling and when do I need it?▼

STRIDE-based threat modeling is a structured analysis technique for mapping trust boundaries and identifying threats in new systems or features. It is needed to prioritize mitigations and secure application architecture before deployment.

How do I analyze an incident response and find the root cause of a security breach?▼

Incident analysis involves executing containment procedures, performing root cause analysis, and verifying remediation steps. This process identifies the source of security breaches and provides structured post-incident verification procedures.

Can I scan for outdated dependencies and exposed secrets in my application?▼

Yes, security assessments include dependency and secrets scanning to identify outdated libraries and exposed credentials. This produces prioritized vulnerability reports rated by severity with assigned ownership for fixes.

Does this security assessment cover authentication and authorization design reviews?▼

Yes, the assessment provides authentication and authorization design guidance, secure defaults checklists, and evaluates file upload and SSRF risks to ensure comprehensive application security architecture.

What is the best way to prioritize application vulnerabilities for remediation?▼

Vulnerabilities are prioritized using CRITICAL, HIGH, MEDIUM, and LOW severity ratings. This structured approach ensures actionable remediation steps and assigned ownership for fixes are clearly communicated to engineering teams.

Related Skills

Explore More Software Engineering Skills→
Avi977Avi977

security-threat-model

A concise, searchable, and standardized solution-catalog for your business needs. It aggregates your SaaS, simplifies your search, and accelerates your path to answers and tools. It's your one-stop-shop for navigating complexity with clarity and precision.

Community
Advanced
jpoleyjpoley
50

security-fixer

Generate secure patches for code vulnerabilities and output unified diffs.

Community
Intermediate
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
SnailSploitSnailSploit
2.9k

graphql-security

Test GraphQL APIs for introspection abuse, injection, and authorization bypasses.

Community
Advanced