security-assessment

Identify security weaknesses in code, architecture, and deployments using STRIDE threat modeling.

Updated Dec 28, 2025

Search Tags:#code review #OWASP #security #threat modeling #STRIDE #risk assessment

Ready to run

npx skills add https://github.com/I2olanD/dotfiles --skill security-assessment-i2oland

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-assessment
Source: https://github.com/I2olanD/dotfiles/tree/main/.config/opencode/skill/security-assessment
Command: npx skills add https://github.com/I2olanD/dotfiles --skill security-assessment-i2oland

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured approach to security assessment of code, architecture, and infrastructure, enabling teams to identify weaknesses early and align on mitigations.

Core Features & Use Cases

Threat modeling with STRIDE to identify security risks in designs and systems.
Structured security review checklists to guide code reviews and architecture assessments.
Documentation-ready outputs for audits, risk registers, and compliance reviews.
Use Case: When a feature is proposed, run this Skill to surface threats, required mitigations, and acceptance criteria.

Quick Start

Use the security-assessment Skill to kick off a threat modeling session and generate a risk-aware review plan.

Frequently Asked Questions about security-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform threat modeling using STRIDE for a new software feature?▼

Structured threat modeling with STRIDE identifies security risks in designs and systems. This Skill guides the process and generates a risk-aware review plan with required mitigations and acceptance criteria for new features.

What's the best way to run an OWASP-aligned code review for security vulnerabilities?▼

OWASP-aligned code reviews use structured checklists to identify security weaknesses. This Skill provides guided review checklists to systematically evaluate code, architecture, and validate security controls across software projects.

Can I use this security assessment approach for both architecture and deployment validation?▼

Yes, security assessment applies to architecture and deployment validation by identifying weaknesses in infrastructure. This Skill supports architecture assessments, security-control validation, and infrastructure review across software projects.

How does a risk assessment generate documentation ready for compliance audits?▼

Risk assessment generates documentation by systematically identifying weaknesses and aligning on mitigations. This Skill provides production-ready documentation outputs formatted specifically for audits, risk registers, and compliance reviews.

When do I need to run a security review checklist during the development lifecycle?▼

Security review checklists are needed when a feature is proposed to surface threats early. Run this Skill during the design phase to generate a risk-aware review plan and establish security acceptance criteria before implementation.