skills.rest
devCharuzu
devCharuzuCOMMUNITY
Explore all skills by this author →
GitHub

senior-security

Automate threat modeling and vulnerability analysis workflows for software architectures and cloud deployments.

Updated Apr 16, 2026
Search Tags:#threat-modeling#risk-management#secure-coding#incident-response#vulnerability-assessment#security-engineering
One-click install
npx skills add https://github.com/devCharuzu/philfida-taskmanage --skill senior-security-devcharuzu
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/devCharuzu/philfida-taskmanage/tree/main/.windsurf/skills/senior-security
Command: npx skills add https://github.com/devCharuzu/philfida-taskmanage --skill senior-security-devcharuzu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Security reviews, threat modeling, vulnerability analysis, and secure architecture guidance are streamlined with this toolkit for security engineers and development teams.

Core Features & Use Cases

  • Threat Modeling Workflow: STRIDE-based threat analysis with risk scoring to prioritize mitigations.
  • Security Architecture & Incident Response: Defense-in-depth design, Zero Trust considerations, and incident response playbooks.
  • Vulnerability & Secure Code Review: SAST/DAST guidance, secure coding checklists, remediation planning.
  • Tools Reference & Best Practices: Cryptography patterns, secret scanning patterns, and security standards references.
  • Use Case: When planning a new cloud-native service, run STRIDE threat modeling, generate a risk report, and map mitigations to architecture.

Quick Start

Describe your system and I will run STRIDE threat modeling and vulnerability assessments to deliver a risk-aware security plan.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run threat modeling for a cloud-native service architecture?▼

Threat modeling for a cloud-native service uses STRIDE-based analysis to identify security weaknesses and applies DREAD scoring to prioritize mitigations. You describe your system architecture to generate a risk-aware security plan with mapped remediation steps.

What is the best way to prioritize vulnerabilities during a secure code review?▼

Vulnerability prioritization during secure code review applies DREAD risk scoring to assess threats. This process generates remediation plans and uses SAST/DAST guidance alongside secure coding checklists to address identified weaknesses.

Can I generate incident response playbooks for software deployments?▼

Incident response playbooks for software deployments can be generated to handle security incidents. The workflow provides defense-in-depth design guidance and Zero Trust considerations to structure your incident response scenarios effectively.

How does STRIDE analysis work for identifying security weaknesses?▼

STRIDE analysis identifies security weaknesses by categorizing threats across spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. It maps these threats to your software architecture to produce targeted secure architecture recommendations.

Does this security tooling provide cryptography and secret scanning references?▼

Security tooling references include cryptography patterns, secret scanning patterns, and security standards. These references support vulnerability analysis and secure design workflows by providing best practices for secure architecture development.

Related Skills

Explore More Software Engineering Skills→
zerAdazerAda

architecture_and_security

Enforce system invariants and conduct STRIDE threat analysis for architecture changes.

Community
Advanced
zhangzhang-111-izhangzhang-111-i
2

senior-security

Model threats with STRIDE and DREAD for security reviews.

Community
Advanced
j0KZj0KZ

security-scanner

Scan JavaScript/TypeScript codebases for OWASP Top 10 risks and secrets.

Community
Advanced
CrashBytesCrashBytes
6

infosec-engineer

Conduct security assessments, threat modeling, and compliance reviews.

Community
Advanced