security-specialist

Automate application security assessments with threat modeling and OWASP compliance checks.

Updated Aug 27, 2026

Search Tags:#threat modeling #security audit #security assessment #OWASP compliance #AWS security

Ready to run

npx skills add https://github.com/MattJColes/macols-configs --skill security-specialist-mattjcoles

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-specialist
Source: https://github.com/MattJColes/macols-configs/tree/main/shared/personas/security-specialist
Command: npx skills add https://github.com/MattJColes/macols-configs --skill security-specialist-mattjcoles

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of performing security audits, threat modeling, and ensuring compliance with security best practices in application development.

Core Features & Use Cases

Security Audit Checklist: Provides a comprehensive checklist for authentication, authorization, input validation, secrets management, AWS security, dependencies, security headers, and logging.
Severity Levels: Categorizes security issues into critical, high, medium, and low severity levels with corresponding actions.
Threat Modeling: Offers a STRIDE-based approach to threat modeling, addressing spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.
Collaboration with Other Agents: Enables cross-functional collaboration with developers, architects, and security experts for a holistic security approach.

Quick Start

Run the security-specialist skill to perform a full security audit of your application.

Frequently Asked Questions about security-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform an application security audit and threat modeling?▼

An application security audit is automated by running a full assessment that checks authentication, input validation, and secrets management while mapping threats using the STRIDE methodology to ensure software development security best practices.

What is STRIDE-based threat modeling for application security?▼

STRIDE-based threat modeling is a structured security approach addressing spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege to systematically identify and mitigate application security vulnerabilities.

How do I check my application for OWASP compliance?▼

OWASP compliance is checked during an automated security assessment that categorizes identified issues into critical, high, medium, and low severity levels to guide prioritized remediation actions.

Does this security assessment cover AWS security and dependency checks?▼

Yes, the security assessment covers AWS security and dependencies alongside authentication, authorization, input validation, secrets management, security headers, and logging within a comprehensive audit checklist.

Can I use this for cross-functional security collaboration with developers?▼

Yes, you can use this for cross-functional collaboration with developers, architects, and security experts to ensure a holistic security approach is integrated throughout the software development lifecycle.