Analyze software architecture ADRs and QA summaries for threats and mitigations.
npx skills add https://github.com/asalhamed/dev-agents --skill security-agent-asalhamed
Please help me install this Agent Skill. Skill: security-agent Source: https://github.com/asalhamed/dev-agents/tree/main/security-agent Command: npx skills add https://github.com/asalhamed/dev-agents --skill security-agent-asalhamed
Threat modeling and security scanning for architectural ADRs and QA outputs to uncover attack surfaces and compliance gaps.
Integrate by supplying ADR summaries and QA summaries to generate threat models and security-scan results.
High-intent search queries and answers about installing and using this skill.
Threat modeling on a software architecture ADR involves analyzing multi-service pipelines to identify endpoints, data stores, and external integrations to uncover attack surfaces. It uses STRIDE-based risk assessment to produce concrete security requirements and a threat-model contract for downstream teams.
Identifying attack surfaces in multi-service pipelines across Rust, Scala, TypeScript, and Go requires analyzing ADRs and QA summaries. This Skill applies STRIDE-based threat modeling to external integrations and data stores to generate actionable security requirements for tech-leads.
Conducting a security scan after QA summaries evaluates pipeline outputs to uncover compliance gaps and vulnerabilities. This phase-driven security review provides actionable guidance for backend and APIs, producing concrete mitigation requirements for reviewers.
Yes, you can use STRIDE risk assessment to generate actionable security requirements for backend and APIs. The Skill analyzes ADRs and QA outputs to apply STRIDE, translating identified threats into concrete, implementable mitigations for downstream teams.
Threat modeling works without external dependencies by analyzing the provided ADR and QA summaries directly. The Skill requires no external libraries, applying its internal STRIDE-based analysis to the multi-service architecture documentation to produce a threat-model contract.
orchestra-mcpOrchestrate multi-agent test execution across Go, Rust, Node.js, and Playwright.
tamnguyentommy-rgbGenerate a structured threat model with assets, trust boundaries, and STRIDE categories.
luokai25Integrates security scans into CI/CD pipelines automating vulnerability detection.
qazuorPerform security audits covering OWASP Top 10, threat modeling, and code review.
