Design secure architectures for data in transit, at rest, and API gateways.
npx skills add https://github.com/dacy/architect-skill --skill security-skill-dacy
Please help me install this Agent Skill. Skill: security-skill Source: https://github.com/dacy/architect-skill/tree/main/.claude/skills/security-skill Command: npx skills add https://github.com/dacy/architect-skill --skill security-skill-dacy
The frontlines of software security are fragile when architecture is bolted on late; this skill helps craft security-in-depth designs that integrate data protection, PCI, Kafka, API security, and secure connectivity from the outset.
Create a comprehensive security architecture design for a PCI-compliant system, covering data in transit, data at rest, Kafka, API Gateway, and database protections.
High-intent search queries and answers about installing and using this skill.
Designing a secure architecture for a PCI-compliant system involves integrating data-in-transit protection using TLS 1.2+ or mTLS, AES-256 encryption at rest, strict key management, and audit logging across API gateways, Kafka, and databases from the outset.
Securing data in transit across API gateways and Kafka requires enforcing mTLS for service-to-service communication, applying least-privilege access controls, and configuring network isolation to prevent unauthorized traffic interception.
Ensuring encryption at rest for cloud-native databases requires applying AES-256 encryption to stored data and implementing centralized key management to control cryptographic keys, minimizing compliance risks and audit findings.
You need mTLS and network isolation in security architecture when designing cloud-native services that exchange sensitive data, ensuring mutual authentication between services and restricting unauthorized lateral network movement.
Yes, this approach supports PCI compliance patterns for API security by enforcing least-privilege access, classifying data, and providing audit logging aligned with company standards to minimize risk and audit findings.
HechaoYannetGenerate a master architecture document from GDDs, ADRs, and governance constraints.
pubnubSecure PubNub apps with Access Manager, AES-256 encryption, and TLS validation.
rajyeole6Design and validate secure cloud-native architectures across AWS, Azure, and GCP.
zebbernEnumerate AWS IAM misconfigurations and privilege escalation paths.
