security-engineering

Security auditing systematically reviews codebases against OWASP Top 10 patterns and CWE mappings to identify vulnerabilities in authentication, input validation, cryptography, and dependencies. This Skill guides you through threat modeling using STRIDE, attack surface analysis, and risk-based remediation planning to prioritize fixes by severity.

Threat modeling is a structured approach to identify potential attacks on a system. STRIDE categorizes threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. This Skill applies STRIDE to architectural reviews, helping you map entry points, trust boundaries, and design flaws before vulnerabilities reach production.

Yes. This Skill covers authentication and authorization vulnerability patterns, including common misconfigurations and weaknesses. It provides concrete OWASP-aligned mitigations and helps you assess cryptographic usage, dependency risks, and access control flaws in your codebase.

This Skill maps discovered vulnerabilities directly to OWASP Top 10 categories and CWE references, providing actionable remediation guidance for each finding. Risk-based prioritization helps you address the highest-impact issues first.

Security audits cover input validation, cryptographic implementations, dependency vulnerabilities, authentication and authorization logic, and architectural trust boundaries. This Skill guides comprehensive reviews across code entry points, external dependencies, and design-level threats.

After identifying vulnerabilities through threat modeling and attack surface analysis, this Skill helps prioritize findings by risk level and severity, then map each to OWASP-aligned mitigations with concrete remediation steps for your specific codebase patterns.