skills.rest
MattJColes
MattJColesCOMMUNITY
Explore all skills by this author →
Website𝕏@mattjcolesGitHub

security-specialist

Automate application security assessments with threat modeling and OWASP compliance checks.

Updated Aug 27, 2026
Search Tags:#threat modeling#security audit#security assessment#OWASP compliance#AWS security
One-click install
npx skills add https://github.com/MattJColes/macols-configs --skill security-specialist-mattjcoles
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-specialist
Source: https://github.com/MattJColes/macols-configs/tree/main/shared/personas/security-specialist
Command: npx skills add https://github.com/MattJColes/macols-configs --skill security-specialist-mattjcoles

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of performing security audits, threat modeling, and ensuring compliance with security best practices in application development.

Core Features & Use Cases

  • Security Audit Checklist: Provides a comprehensive checklist for authentication, authorization, input validation, secrets management, AWS security, dependencies, security headers, and logging.
  • Severity Levels: Categorizes security issues into critical, high, medium, and low severity levels with corresponding actions.
  • Threat Modeling: Offers a STRIDE-based approach to threat modeling, addressing spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.
  • Collaboration with Other Agents: Enables cross-functional collaboration with developers, architects, and security experts for a holistic security approach.

Quick Start

Run the security-specialist skill to perform a full security audit of your application.

Frequently Asked Questions about security-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an application security audit and threat modeling?▼

An application security audit is automated by running a full assessment that checks authentication, input validation, and secrets management while mapping threats using the STRIDE methodology to ensure software development security best practices.

What is STRIDE-based threat modeling for application security?▼

STRIDE-based threat modeling is a structured security approach addressing spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege to systematically identify and mitigate application security vulnerabilities.

How do I check my application for OWASP compliance?▼

OWASP compliance is checked during an automated security assessment that categorizes identified issues into critical, high, medium, and low severity levels to guide prioritized remediation actions.

Does this security assessment cover AWS security and dependency checks?▼

Yes, the security assessment covers AWS security and dependencies alongside authentication, authorization, input validation, secrets management, security headers, and logging within a comprehensive audit checklist.

Can I use this for cross-functional security collaboration with developers?▼

Yes, you can use this for cross-functional collaboration with developers, architects, and security experts to ensure a holistic security approach is integrated throughout the software development lifecycle.

Related Skills

Explore More Software Engineering Skills→
ArdurAIArdurAI
1

god-security-core

Evaluate application and infrastructure security against best practices and threat models.

Official
Advanced
ZateZate
9

audit-report

Generate structured security audit reports with findings, severity, and ASVS mappings.

Community
Advanced
MayaDispelerMayaDispeler
3

devsecops

Apply security checks across CI/CD pipelines with GitLeaks, Semgrep, Snyk, Trivy, and cosign.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced