skills.rest
thapaliyabikendra
thapaliyabikendraCOMMUNITY
Explore all skills by this author →
GitHub

security-patterns

Identify and mitigate web application security vulnerabilities using STRIDE and OWASP Top 10.

24|5|Updated Nov 28, 2025
Search Tags:#OWASP#STRIDE#Authorization#Security#Threat Modeling#Vulnerability#Web Application
One-click install
npx skills add https://github.com/thapaliyabikendra/ai-artifacts --skill security-patterns-thapaliyabikendra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/thapaliyabikendra/ai-artifacts/tree/main/.claude/skills/security-patterns
Command: npx skills add https://github.com/thapaliyabikendra/ai-artifacts --skill security-patterns-thapaliyabikendra

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openiddict-authorization, and includes references (resource) components.

What problem does it solve?

This Skill provides essential web application security patterns, helping you identify, mitigate, and prevent common vulnerabilities. It addresses the critical need for secure coding practices, robust authentication/authorization, and systematic threat modeling to protect sensitive data and maintain application integrity.

Core Features & Use Cases

  • STRIDE Threat Modeling: Guides through a structured approach to identify threats like Spoofing, Tampering, and Information Disclosure, enabling proactive security design.
  • OWASP Top 10 Compliance: Provides checklists and code examples to guard against the most critical web application security risks, such as Injection and Broken Access Control.
  • ABP Authorization Patterns: Details how to implement fine-grained, resource-based authorization within the ABP Framework, ensuring least privilege access.
  • Use Case: A security engineer conducts a security audit on an existing application, using the OWASP Top 10 checklist and STRIDE threat model to identify and document vulnerabilities, then recommends specific ABP authorization patterns for remediation.

Quick Start

Perform a STRIDE threat model for a new user registration feature, identifying potential threats and suggesting initial mitigations.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in web applications using threat modeling?▼

STRIDE threat modeling is a structured approach to identify vulnerabilities like Spoofing, Tampering, and Information Disclosure in web applications. It guides you through proactive security design by systematically categorizing threats to each component, enabling you to document risks and recommend mitigations before deployment.

What are the OWASP Top 10 vulnerabilities and how do I prevent them?▼

The OWASP Top 10 lists the most critical web application security risks, including Injection and Broken Access Control. This Skill provides checklists and code examples to guard against each vulnerability type, helping you implement secure coding practices and validate inputs and outputs in ABP Framework applications.

How do I implement fine-grained authorization in ABP Framework applications?▼

ABP authorization patterns enable resource-based, fine-grained access control enforcing least privilege. This Skill details how to implement these patterns, ensuring users can only access resources they're explicitly authorized for, integrated with ABP's built-in security infrastructure.

Can I use STRIDE threat modeling during security audits?▼

Yes. STRIDE threat modeling is designed for security audits on existing applications. Combined with OWASP Top 10 checklists, it helps security engineers identify vulnerabilities, document findings, and recommend specific ABP authorization patterns and secure coding fixes for remediation.

What security practices does ABP Framework support?▼

ABP Framework supports secure authentication, authorization, input validation, output sanitization, and secure configuration. This Skill covers how to apply these built-in patterns alongside STRIDE and OWASP Top 10 compliance to harden web applications against common vulnerabilities.

Do I need openiddict-authorization to implement secure authentication patterns?▼

openiddict-authorization integrates with ABP Framework to provide OpenID Connect and OAuth 2.0 authentication capabilities. This Skill references these authorization patterns, guiding you through authentication implementation while addressing OWASP Top 10 risks and secure configuration requirements.

Related Skills

Explore More Software Engineering Skills→
thapaliyabikendrathapaliyabikendra
24

authentication-authorization-patterns

Implement OAuth 2.0 and OpenID Connect authentication for .NET healthcare applications.

Community
Advanced
michaelalbermichaelalber
2

dotnet-security-review

Review .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.

Community
Advanced
alexsandrocruzalexsandrocruz

authentication-authorization-patterns

Configure OAuth 2.0, OpenID Connect, and JWT authentication in ASP.NET Core.

Community
Advanced
Fantasia1999Fantasia1999

senior-security

Perform STRIDE threat modeling and vulnerability analysis for security reviews.

Community
Advanced