security

Name: security
Availability: InStock
Author: oornnery

Review codebases for security risks and generate threat models.

Updated Jan 14, 2026

Search Tags:#architecture #security #risk-assessment #threat-modeling #code-review #secure-by-default

Ready to run

npx skills add https://github.com/oornnery/skills --skill security-oornnery

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/oornnery/skills/tree/main/skills/security
Command: npx skills add https://github.com/oornnery/skills --skill security-oornnery

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

Security review, threat modeling, and secure-by-default guidance. Helps teams review changes for vulnerabilities, audit risk, and generate threat models to guide secure design.

Core Features & Use Cases

Security reviews: structured assessments of code and architecture for risk hotspots.
Threat modeling: mappings of assets, trust boundaries, and attack surfaces.
Secure-by-default guidance: actionable patterns for defense-in-depth and secure configurations.

Quick Start

Review the codebase and produce a threat model along with secure-by-default guidance.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security review and threat modeling for my codebase?▼

Security review and threat modeling for a codebase involves mapping assets, trust boundaries, and attack surfaces to identify vulnerabilities. This process applies structured assessments across APIs, backends, frontends, and CLIs to guide secure design and risk prioritization.

What is secure-by-default guidance for software architecture?▼

Secure-by-default guidance provides actionable patterns for defense-in-depth by enforcing default-deny principles, input validation, least privilege, and secure configuration. It helps reduce security risks by guiding secure coding practices across various deployment environments.

Can I apply threat modeling to both backend APIs and frontend CLIs?▼

Yes, you can apply threat modeling to backend APIs, frontends, and CLIs across multiple languages and deployment environments. The process maps attack surfaces and trust boundaries to generate secure design guidance for these diverse components.

How do I prioritize security risks identified during a code review?▼

To prioritize security risks during a code review, you apply structured assessments to identify risk hotspots and generate auditable remediation steps. This approach ensures vulnerabilities are ranked by severity and secure design is guided accordingly.

What's the best way to enforce least privilege and default-deny principles in secure configuration?▼

Enforcing least privilege and default-deny principles in secure configuration requires applying structured secure-by-default guidance. This involves reviewing architecture to ensure input validation and auditable remediation steps are implemented across the codebase.