security-patterns

Model and implement OWASP-aligned security patterns for ABP Framework projects.

Updated Jan 23, 2026
One-click install
npx skills add https://github.com/alexsandrocruz/DominusLeads --skill security-patterns-alexsandrocruz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/alexsandrocruz/DominusLeads/tree/main/backend/Sapienza.Leads/.claude/skills/security-patterns
Command: npx skills add https://github.com/alexsandrocruz/DominusLeads --skill security-patterns-alexsandrocruz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web applications built with ABP Framework often struggle to implement consistent security controls across architecture. This Skill provides structured security patterns, threat modeling templates, and audit-ready guidance to design, review, and enforce robust authentication, authorization, and data protection.

Core Features & Use Cases

  • STRIDE threat modeling templates and checklists for ABP components (UI, API, services)
  • OWASP Top 10 mitigation guidance and secure coding patterns for ABP-based apps
  • ABP authorization patterns, resource-based checks, and security audit templates for code reviews
  • Use Case: during a security audit, generate a threat map and recommended controls for a new ABP module.

Quick Start

Provide a threat-modeling checklist and authorization blueprint for a new ABP module; generate a security-audit README with actionable steps.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement OWASP Top 10 mitigations in ABP Framework applications?

OWASP Top 10 mitigations in ABP Framework applications are implemented using structured secure coding patterns and configuration snippets. This skill provides specific guidance to enforce robust authentication, authorization, and data protection controls across API and frontend layers.

What is the best way to start threat modeling for a new ABP module?

Threat modeling for a new ABP module starts with STRIDE-based templates and checklists targeting UI, API, and service components. You can generate a threat map and an actionable security-audit README to guide secure feature design and code reviews.

Do I need .NET and C# knowledge to use these ABP security patterns?

Yes, .NET and C# knowledge are required to apply these ABP security patterns effectively. The templates, authorization blueprints, and configuration snippets assume familiarity with ABP Framework architecture and its specific component structure.

How do I enforce resource-based authorization checks in ABP Framework?

Resource-based authorization checks in ABP Framework are enforced using provided authorization patterns and blueprints. The skill offers templates and configuration snippets to implement robust permission structures across API and frontend layers during code reviews.

Can I use this for security audits of existing ABP web applications?

Yes, you can use this for security audits of existing ABP web applications. It provides audit-ready guidance, threat maps, and checklists to review and enforce consistent security controls across your architecture.

When should I not use generic security patterns for ABP application code reviews?

Generic security patterns may not suffice for ABP code reviews when deep, framework-specific vulnerabilities require customized threat modeling. This skill provides ABP-aligned controls and templates, ensuring precise enforcement rather than generic web application advice.