Guide security architecture design with STRIDE threat modeling and compliance assessments.
npx skills add https://github.com/tomas-u/claude-skills --skill security-tomas-u
Please help me install this Agent Skill. Skill: security Source: https://github.com/tomas-u/claude-skills/tree/main/security Command: npx skills add https://github.com/tomas-u/claude-skills --skill security-tomas-u
Security architecture decisions are often ad-hoc and error-prone. This skill provides structured, architecture-level guidance to design secure systems, perform threat modeling, and assess compliance.
Load this skill to perform a high-level security architecture review and threat model for your platform.
High-intent search queries and answers about installing and using this skill.
Threat modeling for a microservices platform uses the STRIDE methodology to identify threats across infrastructure and APIs, assess risks, and produce a remediation plan and security roadmap. This skill structures the review for cloud, on-prem, and hybrid environments.
STRIDE threat modeling is a structured method to identify spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege risks. You need it during pre-production security reviews and architecture design to ensure systems are secure by design.
Assessing compliance with ISO 27001 and NIS2 involves mapping security architecture controls against framework requirements to identify gaps. This skill guides governance, risk prioritization, and security controls strategy for cloud, on-prem, and hybrid infrastructure.
Yes, you can use this for security architecture reviews in hybrid cloud environments. It provides structured guidance for infrastructure and API security patterns, validating designs and prioritizing risks across cloud, on-prem, and hybrid deployments.
The best way to map OWASP risks into a security architecture is to align threat modeling outputs with security controls strategy and compliance frameworks. This skill translates OWASP findings into prioritized remediation plans and governance policies.
Planning incident response and security governance for APIs involves defining security architecture patterns, risk prioritization, and compliance controls. This skill helps structure governance frameworks and incident response plans alongside threat modeling outputs.
woohyun212Generates STRIDE-classified threat catalog and prioritized mitigation roadmap from system architecture artifacts.
vignesh2027Analyze system security posture with STRIDE, OWASP Top 10, and incident response planning.
claudcherejiAutomate vulnerability scanning and compliance reporting for cloud infrastructure.
fakhriaditiarahmanAudit application code and infrastructure for security vulnerabilities and compliance.
