security-auditor

Perform STRIDE threat modeling and OWASP Top 10 compliance mapping for application security.

Updated Apr 12, 2026
One-click install
npx skills add https://github.com/asfbay-bit/opchain --skill security-auditor-asfbay-bit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/asfbay-bit/opchain/tree/main/skills/security-auditor
Command: npx skills add https://github.com/asfbay-bit/opchain --skill security-auditor-asfbay-bit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Threat modeling, compliance mapping, and runtime hardening for architecture-level security reviews, bridging gaps left by code-auditors.

Core Features & Use Cases

  • Threat Modeling (STRIDE), attack surface mapping, and adversary profiling for systems.
  • Compliance Mapping (OWASP Top 10 alignment, framework readiness).
  • Runtime Hardening (HTTP security headers, TLS, DNS, WAF/Cloudflare, and detection/response).

Quick Start

Trigger the /security command to start a threat model and posture assessment for your app.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform STRIDE threat modeling for my application architecture?

STRIDE threat modeling maps adversary profiles and attack surfaces across your system architecture to identify security risks. You can trigger an automated posture assessment and threat model generation for your application.

How do I align my application security with OWASP Top 10 requirements?

OWASP Top 10 alignment is achieved through compliance mapping that evaluates your architecture against standard security frameworks. This process checks application readiness and generates checkpoint-based posture reporting.

How do I configure runtime hardening for HTTP security headers and Cloudflare WAF?

Runtime hardening secures your deployment by configuring HTTP security headers, TLS, DNS, and WAF/Cloudflare controls. It bridges gaps left by code-auditors by enforcing infrastructure-level protections and detection responses.

Does this threat modeling approach work for infrastructure requiring architecture-level security reviews?

Threat modeling and runtime hardening are explicitly designed for architecture-level security reviews and governance. It supports systems requiring deployment hardening across threat models and runtime controls.

What is the best way to map my application's attack surface for adversary profiling?

Attack surface mapping is performed as part of a comprehensive threat model to identify and profile potential adversaries. It assesses system vulnerabilities and generates a checkpoint-based posture report for your application.