security-engineering-quickref

Identify anti-patterns in trust-boundary architecture and cryptographic design.

4|Updated Feb 3, 2026
One-click install
npx skills add https://github.com/Fortemi/HotM --skill security-engineering-quickref
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-engineering-quickref
Source: https://github.com/Fortemi/HotM/tree/main/.agents/skills/security-engineering-quickref
Command: npx skills add https://github.com/Fortemi/HotM --skill security-engineering-quickref

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured decision-making framework for complex security engineering challenges, helping operators avoid common anti-patterns in cryptographic and trust-boundary design.

Core Features & Use Cases

  • Decision Domains: Offers curated guidance on cryptographic primitives, chain-of-trust, authentication factors, and supply-chain security.
  • Anti-pattern Identification: Explicitly flags dangerous practices like ad-hoc KDFs, insecure secret handling, and improper dependency pinning.
  • Use Case: When architecting a new authentication flow or selecting an encryption algorithm, use this skill to verify your approach against established security engineering standards.

Quick Start

Use the security-engineering-quickref skill to discover recommended design patterns for implementing a secure chain of trust.

Frequently Asked Questions about security-engineering-quickref

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify anti-patterns in trust-boundary architecture and authentication stacks?

To identify anti-patterns in trust-boundary architecture, use a structured decision-aid framework that flags dangerous practices like ad-hoc KDFs and insecure secret handling during secure system design.

What is the best way to select cryptographic primitives for a secure chain of trust?

Selecting cryptographic primitives for a secure chain of trust requires a decision-aid framework that evaluates design patterns against established security engineering standards and supply-chain integrity rules.

When do I need a decision-aid framework for applied security engineering?

You need a decision-aid framework for applied security engineering when architecting new authentication flows or selecting encryption algorithms to verify your approach against established cryptographic standards.

How do I verify my authentication flow design against established security standards?

Verify your authentication flow design by applying a structured decision-making framework that explicitly identifies anti-patterns in authentication factors and improper dependency pinning.

What are common supply-chain security anti-patterns in cryptographic design?

Common supply-chain security anti-patterns in cryptographic design include improper dependency pinning and ad-hoc key derivation functions, which a structured decision framework helps identify and avoid.

Does secure system design require integration with a discovery pipeline for domain-specific guidance?

Secure system design requires integration with a discovery pipeline to surface domain-specific security guidance, ensuring your cryptographic and trust-boundary architecture aligns with best practices.