skills.rest
kimasplund
kimasplundCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-analysis-skills

Apply STRIDE, OWASP Top 10, and CVSS risk scoring to software systems.

4|1|Updated Jan 19, 2026
Search Tags:#STRIDE#threat-modeling#code-review#OWASP Top 10#CVSS#secure-coding#security-analysis
One-click install
npx skills add https://github.com/kimasplund/claude_cognitive_reasoning --skill security-analysis-skills
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-analysis-skills
Source: https://github.com/kimasplund/claude_cognitive_reasoning/tree/main/skill-frameworks/security-analysis-skills
Command: npx skills add https://github.com/kimasplund/claude_cognitive_reasoning --skill security-analysis-skills

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a comprehensive framework to help development teams identify and mitigate security threats by applying STRIDE, OWASP Top 10, and CVSS risk scoring to software systems.

Core Features & Use Cases

  • STRIDE threat modeling and category-based threat identification for system components.
  • OWASP Top 10 risk awareness with practical secure-coding patterns and checklists for code reviews.
  • CVSS-based risk scoring to prioritize remediation and guide secure design decisions.

Quick Start

Use this skill to perform threat modeling on a new feature by applying STRIDE, OWASP Top 10 checks, and CVSS scoring during design reviews.

Frequently Asked Questions about security-analysis-skills

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform STRIDE threat modeling on a new software feature?▼

OWASP Top 10 risk analysis is applied during code reviews using practical secure-coding patterns and checklists. This skill integrates these checks to identify and mitigate common vulnerability risks in software systems.

What is CVSS risk scoring and how does it prioritize secure coding remediation?▼

CVSS risk scoring quantifies vulnerability severity to prioritize remediation and guide secure design decisions. This skill provides reference materials to calculate scores and rank threats identified through STRIDE and OWASP analysis.

Can I use this skill for security review checklists across deployment contexts?▼

Yes, security review checklists cover design, code, and deployment contexts. The skill provides reference materials and templates to support secure coding patterns and threat modeling throughout the software development lifecycle.

What's the best way to integrate threat modeling into my secure development workflow?▼

Integrate threat modeling by applying STRIDE, OWASP Top 10 checks, and CVSS scoring during design reviews. This skill provides the frameworks and checklists needed to support secure development across system components.

Does this skill support secure coding patterns for the OWASP Top 10?▼

Yes, it provides practical secure-coding patterns and checklists for OWASP Top 10 risk awareness. These resources support code reviews by identifying common vulnerabilities and guiding secure design decisions.

Related Skills

Explore More Software Engineering Skills→
bigeasyfreemanbigeasyfreeman
2

security-review

Automate STRIDE threat modeling and OWASP Top 10 scanning on code changes before merging.

Community
Advanced
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced
CybLowCybLow
1

sec-ops

Automate CI/CD security testing with SAST, DAST, dependency, secret, and container scans.

Community
Advanced
MonumentalSystemsMonumentalSystems
17

threat-modeling

Structure threat discovery and risk prioritization using STRIDE, PASTA, and LINDDUN frameworks.

Official
Intermediate