security-review

STRIDE threat modeling categorizes security risks like spoofing, tampering, and information disclosure. This skill applies STRIDE patterns across code, architecture, and configurations to identify vulnerabilities and produce structured threat models during the review phase.

Security risk assessment for SOC 2 and GDPR involves identifying threats and scoring risks. This skill provides a risk rating framework with severity levels and remediation guidance aligned to SOC 2, GDPR, and HIPAA controls to drive mitigations.

Integrate secure coding patterns by applying vulnerability assessments and checklists across planning, implementation, review, and completion phases. This skill generates secure coding templates and review checklists to ensure end-to-end security validation and traceability.

Yes, threat modeling can be applied to existing architecture and deployment configurations. The skill analyzes authentication, authorization, data handling, and deployment security patterns to identify vulnerabilities and verify compliance across your current setup.

The best way to structure a vulnerability assessment is to run a STRIDE-based threat model early in planning. This skill produces structured guidance including threat models, risk scoring, and vulnerability patterns to guide secure implementation and audits.

No specific dependencies or external tools are required. The skill provides self-contained security analysis patterns, risk frameworks, and compliance checklists to guide threat modeling and vulnerability assessment directly within your workflow.