security

Identify and remediate security vulnerabilities using OWASP Top 10 and STRIDE threat modeling.

Updated Mar 13, 2026
One-click install
npx skills add https://github.com/CoreStack-Engg/claude-plugins --skill security-corestack-engg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/CoreStack-Engg/claude-plugins/tree/main/plugins/architecture/skills/security
Command: npx skills add https://github.com/CoreStack-Engg/claude-plugins --skill security-corestack-engg

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify, assess, and remediate security vulnerabilities across software systems, enabling safer, more compliant products.

Core Features & Use Cases

  • Threat modeling (OWASP Top 10, STRIDE) to identify attack surfaces early
  • Secrets management and secure credential handling to prevent leakage
  • JWT best practices and TLS/HTTPS configuration for secure communications

Quick Start

Audit a new feature for vulnerabilities and apply recommended mitigations to establish a secure baseline.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities using OWASP Top 10 and STRIDE threat modeling?

Threat modeling with OWASP Top 10 and STRIDE identifies security vulnerabilities by mapping attack surfaces early in the software design phase. This process assesses system architecture to pinpoint threats and apply targeted remediations for safer products.

What are JWT best practices for secure communications and TLS configuration?

JWT best practices and TLS configuration secure communications by enforcing encrypted data transit and validating token integrity. Proper TLS setup prevents interception, while strict JWT handling ensures authenticated requests across software systems.

How do I prevent secrets leakage with secure credential handling?

Secrets management prevents leakage by isolating and securing credentials outside of application code. Centralized secure credential handling ensures sensitive data is encrypted and managed properly, blocking unauthorized access across varying project sizes.

Can I audit a new software feature for security vulnerabilities before deployment?

Auditing a new software feature for security vulnerabilities establishes a secure baseline before deployment. The assessment identifies flaws, applies recommended mitigations, and aligns the feature with secure design and communications protocols.

What is the best way to apply secure design patterns across projects of varying sizes?

Applying secure design patterns across projects of varying sizes involves integrating threat modeling, secrets management, and TLS configuration into the development lifecycle. This approach systematically remediates vulnerabilities and enforces consistent security baselines.