security-architecture-review

This Skill derives DFDs with trust boundaries directly from your codebase by analyzing code paths and runtime interactions, producing structured visual artifacts for architecture-level risk assessment.

An Attack Flow overlay illustrates abuse paths and their impact across architectural boundaries. It maps security risks by tracing attack vectors visually over your existing DFDs and trust boundaries derived from code evidence.

You create an attack surface inventory and sensitive data map grounded in code evidence by performing a security architecture review that traces code paths and runtime interactions to compile structured artifacts for backlog tracking.

Yes, you can produce security product requirements for backlog tracking. The architecture review generates risk summaries and structured artifacts grounded in code evidence that are suitable for SPR backlog tracking.

Yes, a code-grounded security architecture review works for microservices and distributed runtime environments. It applies architecture-level risk assessment to codebases, services, and runtime interactions to map trust boundaries and data flows.

You need a security architecture review when you require architecture-level risk assessment rather than line-by-line vulnerability scanning, specifically to derive DFDs, trust boundaries, and Attack Flow overlays from code paths and runtime interactions.