Apply STRIDE threat modeling and language-specific mitigations to secure code.
npx skills add https://github.com/tswr/engineering-mastery-plugin --skill security-tswr
Please help me install this Agent Skill. Skill: security Source: https://github.com/tswr/engineering-mastery-plugin/tree/main/skills/security Command: npx skills add https://github.com/tswr/engineering-mastery-plugin --skill security-tswr
Security defects are the most expensive to fix, causing data breaches, compliance violations, and permanent loss of user trust. Unlike functional bugs, security flaws are actively exploited by adversaries, requiring proactive, adversary-aware coding practices rather than just bug avoidance.
Use the security skill to review the new user authentication endpoint for injection vulnerabilities, insecure session handling, and missing authorization checks.
High-intent search queries and answers about installing and using this skill.
To prevent injection vulnerabilities, enforce allowlist-only input validation, canonicalization, and size limits at all trust boundaries to effectively block injection and traversal attacks.
STRIDE threat modeling systematically identifies attack surfaces and potential threats before building systems, essential when designing software that handles sensitive data or untrusted input.
Yes, this provides language-specific vulnerability mitigations for C++, Python, Rust, and Java, covering memory safety, deserialization risks, injection patterns, and secure cryptography usage.
To audit dependencies for supply chain security risks, review external libraries to identify known vulnerabilities, enforce least-privilege access controls, and mitigate exploitable defects during code reviews.
The best way to design a payment processing API is to implement secure authentication, prevent SQL injection, enforce least-privilege access controls, and audit dependencies for supply chain risks.
Secure coding requires adversary-aware input validation because security flaws are actively exploited by adversaries, demanding proactive coding practices rather than just functional bug avoidance.
hardw00tIdentify threats using STRIDE, PASTA, Attack Trees, and DREAD.
nimeshgurungAutomate threat modeling, security auditing, and penetration testing.
allanninalScan codebases for security vulnerabilities and coding standards with Semgrep.
taipt1504Scan Spring Boot projects for security vulnerabilities and misconfigurations.
