security-deep

What problem does it solve?

Architecture-level security decisions can be error-prone and time-consuming without a structured framework. This skill provides a comprehensive approach to threat modeling, risk assessment, and compliant security design.

Core Features & Use Cases

• Threat modeling and risk assessment across web apps, APIs, and containers.
• Security architecture design guidance aligned to SOC2, GDPR, PCI-DSS, and HIPAA.
• Reference-driven security tooling guidance (Semgrep, Bandit, ZAP, Trivy) and incident response playbooks.
• Use Case: A new microservices platform requiring zero-trust design and compliant data handling.

Quick Start

Identify the system's security goals, map them to threat models, select appropriate controls, and document architecture decisions using the provided references.