security-assessment

STRIDE threat modeling systematically identifies security threats across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege categories. Map your architecture components, apply each STRIDE category to identify potential threats, then document mitigations for each vulnerability discovered during the analysis.

Secure coding review focuses on input validation, least privilege access, secure defaults, and authentication boundaries. This Skill guides reviewers through identifying common vulnerabilities in code and architecture, ensuring controls align with threat models and compliance requirements.

Yes. Security assessment covers infrastructure validation alongside code and architecture review. Apply threat modeling and secure design patterns to infrastructure components, third-party dependencies, and deployment configurations to identify and remediate vulnerabilities before production.

Document each identified threat, its severity, and corresponding mitigation in a security notebook or assessment artifact. Align mitigations with functional and technical requirements, compliance frameworks, and your threat model outputs for audit and validation.

Threat modeling identifies potential attack vectors and mitigations at the design level using frameworks like STRIDE. Code security review validates that implementation follows secure patterns and contains no exploitable vulnerabilities. Both are stages in comprehensive security assessment.

This Skill provides structured methodology without external tool dependencies. You apply STRIDE analysis, secure design principles, and review techniques using documentation, architecture diagrams, and code inspection—no specialized tools required to get started.