Verified:GitHub

senior-security

Automate threat modeling and vulnerability analysis workflows for software architectures and cloud deployments.

Updated Apr 16, 2026

Search Tags:#threat-modeling #risk-management #secure-coding #incident-response #vulnerability-assessment #security-engineering

Ready to run

npx skills add https://github.com/devCharuzu/philfida-taskmanage --skill senior-security-devcharuzu

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/devCharuzu/philfida-taskmanage/tree/main/.windsurf/skills/senior-security
Command: npx skills add https://github.com/devCharuzu/philfida-taskmanage --skill senior-security-devcharuzu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Security reviews, threat modeling, vulnerability analysis, and secure architecture guidance are streamlined with this toolkit for security engineers and development teams.

Core Features & Use Cases

Threat Modeling Workflow: STRIDE-based threat analysis with risk scoring to prioritize mitigations.
Security Architecture & Incident Response: Defense-in-depth design, Zero Trust considerations, and incident response playbooks.
Vulnerability & Secure Code Review: SAST/DAST guidance, secure coding checklists, remediation planning.
Tools Reference & Best Practices: Cryptography patterns, secret scanning patterns, and security standards references.
Use Case: When planning a new cloud-native service, run STRIDE threat modeling, generate a risk report, and map mitigations to architecture.

Quick Start

Describe your system and I will run STRIDE threat modeling and vulnerability assessments to deliver a risk-aware security plan.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run threat modeling for a cloud-native service architecture?▼

Threat modeling for a cloud-native service uses STRIDE-based analysis to identify security weaknesses and applies DREAD scoring to prioritize mitigations. You describe your system architecture to generate a risk-aware security plan with mapped remediation steps.

What is the best way to prioritize vulnerabilities during a secure code review?▼

Vulnerability prioritization during secure code review applies DREAD risk scoring to assess threats. This process generates remediation plans and uses SAST/DAST guidance alongside secure coding checklists to address identified weaknesses.

Can I generate incident response playbooks for software deployments?▼

Incident response playbooks for software deployments can be generated to handle security incidents. The workflow provides defense-in-depth design guidance and Zero Trust considerations to structure your incident response scenarios effectively.

How does STRIDE analysis work for identifying security weaknesses?▼

STRIDE analysis identifies security weaknesses by categorizing threats across spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. It maps these threats to your software architecture to produce targeted secure architecture recommendations.

Does this security tooling provide cryptography and secret scanning references?▼

Security tooling references include cryptography patterns, secret scanning patterns, and security standards. These references support vulnerability analysis and secure design workflows by providing best practices for secure architecture development.