Perform threat modeling and vulnerability assessment for web and cloud-native applications.
npx skills add https://github.com/elihuvillaraus/skills --skill security-eng
Please help me install this Agent Skill. Skill: security-eng Source: https://github.com/elihuvillaraus/skills/tree/main/security-eng Command: npx skills add https://github.com/elihuvillaraus/skills --skill security-eng
This Skill addresses the critical need for robust application security by proactively identifying and mitigating vulnerabilities throughout the software development lifecycle.
Use the security-eng skill to perform a threat model analysis on the provided system architecture diagram.
High-intent search queries and answers about installing and using this skill.
Threat modeling for cloud-native applications systematically identifies potential security threats and design weaknesses before development begins. It constructs secure-by-design systems applying defense-in-depth and zero-trust principles to mitigate risks early.
Secure code review is a vulnerability assessment process conducting thorough code analysis and security testing to uncover exploitable flaws. It ensures robust application security by proactively identifying and mitigating vulnerabilities throughout the software development lifecycle.
Yes, you can integrate vulnerability assessment into your CI/CD pipeline to automatically scan code for common vulnerabilities. This ensures secure configurations are continuously applied to your cloud infrastructure during deployments.
Secure architecture design with defense-in-depth builds secure-by-design systems using zero-trust principles. It establishes multiple layers of security controls to protect modern web and cloud-native applications against potential threats.
Yes, the vulnerability assessment requires actionable remediation steps for all identified risks. It delivers expert application security engineering by ensuring every uncovered exploitable flaw has a concrete mitigation strategy.
haabeAssess code and architecture security risks using OWASP Secure by Design guidelines.
saajunaidReview codebases and cloud infrastructure for OWASP Top 10 risks.
Imad-OuteAutomate code reviews for correctness, security, and testability in SDLC phase 6.
j0KZScan JavaScript/TypeScript codebases for OWASP Top 10 risks and secrets.
