Identify cross-platform security risks via threat modeling and defense-in-depth guidance.
npx skills add https://github.com/truongnat/skills --skill security-pro
Please help me install this Agent Skill. Skill: security-pro Source: https://github.com/truongnat/skills/tree/main/skills/security-pro Command: npx skills add https://github.com/truongnat/skills --skill security-pro
Security guidance that helps teams perform threat modeling, secure design, and defense-in-depth planning across web, mobile, API, and backend stacks.
Perform a security review across a web/mobile/API stack by applying threat-modeling and defense-in-depth principles.
High-intent search queries and answers about installing and using this skill.
Threat modeling across web, mobile, API, and backend architectures involves identifying risks and mapping them to actionable controls. This Skill guides you through secure design and defense-in-depth planning using policy references.
Defense-in-depth planning for cross-platform security layers actionable controls across web, mobile, API, and backend stacks. It enforces server-side validation and references OSI/TCP-IP concepts to mitigate identified threats.
Yes, you can use this for secure design and authorization guidance. It provides authn/authz support, secrets management, API hardening, and operational security signals with clear handoffs to stack-specific skills.
To map application security risks to effective controls, the Skill references MITRE ATT&CK and OWASP practices. It identifies threats and delegates implementation to sibling skills like nextjs-pro or postgresql-pro.
No, it delegates backend hardening to sibling skills like nestjs-pro and nextjs-pro. It focuses on secure design, threat modeling, and enforcing server-side controls rather than writing implementation code.
You need a cross-platform security review when identifying risks across web, mobile, API, and backend layers. It supports authorized self-assessment, risk reporting, and establishes defense-in-depth guidance before deployment.
tachyon-beepRoute security-architecture inputs to local reference sheets for execution.
truongnatDesign and validate authentication and authorization architectures across web, mobile, and API systems.
truongnatDefine test pyramid strategies and CI practices for unit, integration, and e2e tests.
Arbab1308Simulates attacker techniques to test defenses using MITRE ATT&CK phase mappings.
