securability-engineering

Enforce OWASP FIASSE and SSEM securable coding attributes during code generation.

141|14|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/OWASP/secure-agent-playbook --skill securability-engineering-owasp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: securability-engineering
Source: https://github.com/OWASP/secure-agent-playbook/tree/main/skills/securability-engineering
Command: npx skills add https://github.com/OWASP/secure-agent-playbook --skill securability-engineering-owasp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures generated code adheres to securable-by-default principles by wrapping code generation with OWASP FIASSE and SSEM attributes, reducing security gaps in software outputs.

Core Features & Use Cases

  • Enforces the nine SSEM attributes (Analyzability, Modifiability, Testability, Confidentiality, Accountability, Authenticity, Availability, Integrity, Resilience) and the Transparency principle in all generated code.
  • Applies security-focused constraints during generation, scaffolding, and refactoring to produce inherently securable components (auth, input handling, data access, API endpoints, trust boundaries).
  • Use Case: when building a new feature or refactoring a module, invoke securability-engineering to ensure outputs meet securability criteria from the start.

Quick Start

Wrap code generation tasks with securability-engineering to enforce FIASSE/SSEM constraints.

Frequently Asked Questions about securability-engineering

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I ensure generated code is securable by default during scaffolding?

To ensure generated code is securable by default, wrap code generation tasks with constraints that enforce OWASP FIASSE securable coding attributes and SSEM rules across auth, input handling, and trust boundary components.

What are the nine SSEM attributes for secure coding?

The nine SSEM attributes for secure coding are Analyzability, Modifiability, Testability, Confidentiality, Accountability, Authenticity, Availability, Integrity, and Resilience, which must be aligned with the Transparency principle.

When should I apply securability engineering to a software project?

Apply securability engineering during code generation, scaffolding, or refactoring to ensure outputs meet securability criteria from the start, reducing security gaps when building a new feature or refactoring a module.

Does secure coding require specific handling for trust boundaries and data access?

Secure coding requires specific handling for trust boundaries and data access by applying security-focused constraints during generation to produce inherently securable components across these critical areas.

How do I enforce OWASP FIASSE constraints when refactoring a module?

To enforce OWASP FIASSE constraints when refactoring a module, wrap the refactoring task with securability-engineering to align outputs with the nine SSEM attributes and related defense coding practices.

What is the Transparency principle in securable code generation?

The Transparency principle in securable code generation is a core FIASSE requirement that all generated outputs must align with alongside the nine SSEM attributes to ensure inherent securability.