skills.rest
I2olanD
I2olanDCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-assessment

Identify security weaknesses in code, architecture, and deployments using STRIDE threat modeling.

Updated Dec 28, 2025
Search Tags:#code review#OWASP#security#threat modeling#STRIDE#risk assessment
One-click install
npx skills add https://github.com/I2olanD/dotfiles --skill security-assessment-i2oland
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-assessment
Source: https://github.com/I2olanD/dotfiles/tree/main/.config/opencode/skill/security-assessment
Command: npx skills add https://github.com/I2olanD/dotfiles --skill security-assessment-i2oland

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured approach to security assessment of code, architecture, and infrastructure, enabling teams to identify weaknesses early and align on mitigations.

Core Features & Use Cases

  • Threat modeling with STRIDE to identify security risks in designs and systems.
  • Structured security review checklists to guide code reviews and architecture assessments.
  • Documentation-ready outputs for audits, risk registers, and compliance reviews.
  • Use Case: When a feature is proposed, run this Skill to surface threats, required mitigations, and acceptance criteria.

Quick Start

Use the security-assessment Skill to kick off a threat modeling session and generate a risk-aware review plan.

Frequently Asked Questions about security-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling using STRIDE for a new software feature?▼

Structured threat modeling with STRIDE identifies security risks in designs and systems. This Skill guides the process and generates a risk-aware review plan with required mitigations and acceptance criteria for new features.

What's the best way to run an OWASP-aligned code review for security vulnerabilities?▼

OWASP-aligned code reviews use structured checklists to identify security weaknesses. This Skill provides guided review checklists to systematically evaluate code, architecture, and validate security controls across software projects.

Can I use this security assessment approach for both architecture and deployment validation?▼

Yes, security assessment applies to architecture and deployment validation by identifying weaknesses in infrastructure. This Skill supports architecture assessments, security-control validation, and infrastructure review across software projects.

How does a risk assessment generate documentation ready for compliance audits?▼

Risk assessment generates documentation by systematically identifying weaknesses and aligning on mitigations. This Skill provides production-ready documentation outputs formatted specifically for audits, risk registers, and compliance reviews.

When do I need to run a security review checklist during the development lifecycle?▼

Security review checklists are needed when a feature is proposed to surface threats early. Run this Skill during the design phase to generate a risk-aware review plan and establish security acceptance criteria before implementation.

Related Skills

Explore More Software Engineering Skills→
BadhansenBadhansen

explain-code

Generate class, flow, ER, and sequence diagrams from source code.

Community
Intermediate
ilove323ilove323

risk-assessment

Identify and evaluate operational risks across processes, systems, and teams.

Community
Intermediate
rnavarychrnavarych
14

security-testing

Automate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.

Community
Advanced
zangxin75zangxin75

security

Assess vulnerabilities and review code against OWASP Top 10 standards.

Community
Advanced