skills.rest
alessioroberto82
alessioroberto82COMMUNITY
Explore all skills by this author →
GitHub

security

Audit software projects for security vulnerabilities and compliance issues.

1|Updated Feb 19, 2026
Search Tags:#OWASP#security#vulnerability assessment#threat modeling#STRIDE#compliance
One-click install
npx skills add https://github.com/alessioroberto82/claude-plugin-bmad --skill security-alessioroberto82
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/alessioroberto82/claude-plugin-bmad/tree/main/plugin/skills/security
Command: npx skills add https://github.com/alessioroberto82/claude-plugin-bmad --skill security-alessioroberto82

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies vulnerabilities, models threats, and validates compliance to ensure software is shipped securely, preventing potential breaches and data loss.

Core Features & Use Cases

  • Threat Modeling: Identifies potential attack vectors using methodologies like STRIDE.
  • Vulnerability Assessment: Checks against standards like OWASP Top 10 and platform-specific security concerns.
  • Compliance Checks: Validates adherence to relevant regulations (e.g., GDPR, HIPAA).
  • Use Case: Before deploying a new API, run this Skill to proactively identify and remediate critical security flaws, ensuring user data remains protected.

Quick Start

Run the security guardian to perform a threat model on the current project architecture.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling using STRIDE for my software architecture?▼

Threat modeling using STRIDE identifies potential attack vectors by spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. This Skill automates that analysis to map architectural risks proactively before deployment.

What is the best way to check my code against the OWASP Top 10?▼

Checking code against the OWASP Top 10 involves scanning for the ten most critical web application security risks. This Skill performs vulnerability assessments against those standards to identify flaws and generate a prioritized remediation roadmap.

Can I validate GDPR and HIPAA compliance during a security audit?▼

You can validate GDPR and HIPAA compliance during a security audit by checking architectural controls against relevant regulations. This Skill detects the project domain and applies domain-specific compliance checks to ensure data protection standards are met.

How do I identify and prioritize vulnerabilities with severity levels?▼

Identifying vulnerabilities with severity levels requires analyzing architecture to assign P0 through P3 rankings. This Skill evaluates security flaws using domain-specific checks and outputs a remediation roadmap prioritized by vulnerability severity.

Does this vulnerability assessment work for general software projects?▼

This vulnerability assessment works for general software projects by detecting the project domain and applying either software-specific or general security checks. It analyzes architecture against STRIDE and OWASP Top 10 regardless of the platform.

Related Skills

Explore More Software Engineering Skills→
nist0nist0

threat-modeling

Automate STRIDE threat modeling to enumerate assets, map trust boundaries, and suggest mitigations.

Community
Advanced
alicanerdoganalicanerdogan
1

i-audit

Audit web UI implementations for accessibility, performance, theming, and responsive design.

Community
Advanced
BagelHoleBagelHole
46

sast-scanning

Performs static security testing on source code using Semgrep, CodeQL, and SonarQube.

Community
Intermediate
motormetricsmotormetrics
21

security

Automate security auditing for codebases and dependencies in CI pipelines.

Official
Advanced