skills.rest
Exia-thd
Exia-thdCOMMUNITY
Explore all skills by this author →
GitHub

security-engineer

Assess application code, architecture, and dependencies for security risks.

Updated Apr 10, 2026
Search Tags:#security#owasp#audit#threat modeling#penetration testing#remediation#compliance
One-click install
npx skills add https://github.com/Exia-thd/Digital-Nervous --skill security-engineer-exia-thd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/Exia-thd/Digital-Nervous/tree/main/skills/security-engineer
Command: npx skills add https://github.com/Exia-thd/Digital-Nervous --skill security-engineer-exia-thd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Organizations often lack a single, end‑to‑end process to identify, prioritize, and remediate security weaknesses across code, architecture, authentication, data handling, and third‑party components.

Core Features & Use Cases

  • Threat Modeling – STRIDE analysis and attack‑surface mapping for all services.
  • OWASP Top 10 Code Audit – Precise, line‑level findings with remediation guidance.
  • Auth & Data Review – Detailed token, RBAC, PII inventory, and encryption checks.
  • Supply‑Chain & Dependency Scan – Full SBOM, vulnerability re‑evaluation, and license compliance.
  • Remediation & Pen‑Test Planning – Prioritized fix instructions, test cases, and execution timelines.

Quick Start

Run the security‑engineer skill to conduct a full security assessment of your application.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 code audit for my web application?▼

An OWASP Top 10 code audit evaluates application code and architecture for security weaknesses. It provides precise line-level findings and remediation guidance without requiring manual checklists.

How do I generate a threat model using STRIDE for microservices?▼

Threat modeling for microservices uses STRIDE analysis to map the attack surface of all services. This process identifies potential security threats across the application architecture.

Can I automate supply-chain risk and dependency scanning?▼

Supply-chain risk and dependency scanning generates a full SBOM to evaluate vulnerabilities and license compliance. It assesses third-party components to identify potential security risks.

Does this security assessment review authentication flows and data protection?▼

Security assessments include detailed authentication and data reviews. They evaluate token implementations, RBAC configurations, PII inventory, and encryption checks for web services.

What is the best way to plan penetration testing after a security audit?▼

Planning penetration testing after a security audit involves generating prioritized fix instructions, test cases, and execution timelines. This creates a structured remediation plan.

Related Skills

Explore More Software Engineering Skills→
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
RifteoRifteo
30

remediation-planner

Generate prioritized remediation plans with effort estimates for security vulnerabilities.

Official
Advanced
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced