security-review

Analyze systems and designs for threats and mitigations using STRIDE-style analysis.

Updated Feb 8, 2026
One-click install
npx skills add https://github.com/mbuyco/agent-skills --skill security-review-mbuyco
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mbuyco/agent-skills/tree/main/security-review
Command: npx skills add https://github.com/mbuyco/agent-skills --skill security-review-mbuyco

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides structured security analysis and threat modeling for systems and designs, helping teams identify risks early and build more secure solutions.

Core Features & Use Cases

  • Threat modeling guidance using STRIDE-inspired analysis
  • Risk assessment with impact and likelihood, and concrete mitigations
  • Secure-defaults and architectural hardening recommendations across various designs

Quick Start

Run a security review on your system design, codebase, or architecture to identify assets, threats, and mitigations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling for a system architecture design?

Threat modeling for system architecture design identifies assets, threat categories, risk impacts, and likelihoods, and provides concrete mitigations using STRIDE-inspired analysis to ensure secure defaults.

What is STRIDE analysis in security reviews?

STRIDE analysis in security reviews categorizes threats like spoofing, tampering, and information disclosure, enabling structured risk assessment across codebases and architectural designs.

Can I use automated security analysis for an existing codebase?

Automated security analysis can review existing codebases to identify assets, threat categories, risk impacts, and likelihoods, generating concrete mitigations and architectural hardening recommendations.

What's the best way to assess risk impact and likelihood during a security review?

The best way to assess risk impact and likelihood during a security review involves structured threat modeling that formally identifies assets and maps threat categories to concrete mitigations.

Does this threat modeling approach support architectural hardening recommendations?

This threat modeling approach supports architectural hardening by providing secure-defaults recommendations across various designs, ensuring identified risks are mitigated during the security analysis.