security-assessment

Threat modeling and vulnerability scanning automate security assessment by identifying risks across components and systems. This Skill applies STRIDE analysis and OWASP pattern detection to model threats, scan for vulnerabilities, and produce risk-ranked findings with remediation guidance before code reaches production.

STRIDE threat modeling systematically identifies threats by examining Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege across your architecture. This Skill applies STRIDE to map attack surfaces, uncover control gaps, and rank risks by severity for prioritized remediation.

Yes. This Skill validates security controls at component, system, or full-architecture scope, checks privacy considerations, scores vulnerabilities using CVSS, and produces comprehensive compliance status reports showing control coverage and gaps across your entire environment.

This Skill conducts vulnerability scanning using OWASP pattern detection to identify injection risks, missing rate limiting, and other common weaknesses. It flags findings by severity level—Critical, High, Medium, Low—and includes specific remediation guidance for each discovered vulnerability.

Security assessment output includes a risk-ranked findings summary, blocking issues categorized by severity, CVSS scores, remediation guidance, and a detailed compliance report. Results show counts by severity tier and identify which controls are missing or misconfigured.

This Skill builds on parallel processing, project awareness, and artifact metadata to orchestrate assessments. It works across different environments and requires component scope definition; it handles threat modeling, scanning, and control validation without additional security tool setup.