skills.rest
mdnaimul22
mdnaimul22COMMUNITY
Explore all skills by this author →
GitHub

senior-security

Perform STRIDE threat modeling and DREAD scoring for software systems.

2|Updated Apr 15, 2026
Search Tags:#vulnerability assessment#threat modeling#STRIDE#security architecture#incident response#DREAD#secure code review
One-click install
npx skills add https://github.com/mdnaimul22/human-skills --skill senior-security-mdnaimul22
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/mdnaimul22/human-skills/tree/main/skills/senior-security
Command: npx skills add https://github.com/mdnaimul22/human-skills --skill senior-security-mdnaimul22

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you perform structured security engineering work so you can identify threats, assess vulnerabilities, and define secure architecture and review actions before problems reach production.

Core Features & Use Cases

  • Threat modeling with STRIDE + DREAD: Turn system diagrams and data flows into prioritized threat scenarios with mapped mitigations.
  • Secure security architecture planning: Build defense-in-depth and Zero Trust designs, including authentication/authorization, encryption strategy, and monitoring plans.
  • Vulnerability and secure code review workflows: Coordinate assessment steps, scanning categories, and security-focused code review checklists.
  • Incident response runbook: Provide a clear, phased process for triage, containment, eradication, recovery, and post-mortem documentation.
  • Security tool and cryptography references: Use curated references for security patterns, cryptography implementation guidance, and threat modeling artifacts.

Quick Start

Ask the senior-security Skill to produce a STRIDE threat model for your system by analyzing your trust boundaries and data flows, then score and prioritize threats with DREAD and propose mitigations.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform STRIDE threat modeling for my system architecture?▼

STRIDE threat modeling maps your system's data flow elements and trust boundaries to threat categories, then scores risks with DREAD to produce prioritized, actionable mitigations. This process identifies spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege vulnerabilities.

What is the best way to score and prioritize security threats during vulnerability assessment?▼

Scoring and prioritizing security threats is best done using the DREAD methodology, which evaluates damage potential, reproducibility, exploitability, affected users, and discoverability. This produces a quantitative risk score to rank vulnerabilities and guide remediation efforts effectively during secure code reviews.

How do I design a Zero Trust and defense-in-depth security architecture?▼

Designing a Zero Trust and defense-in-depth security architecture requires defining layered controls for authentication, authorization, encryption, and continuous monitoring. This ensures strict identity verification and minimizes lateral movement by validating every access request across your software systems.

Can I get an incident response runbook for triaging and containing detected security incidents?▼

An incident response runbook provides a clear, phased process for triage, containment, eradication, recovery, and post-mortem documentation. This structured guidance ensures security teams systematically handle detected incidents and restore system integrity while maintaining proper forensic records.

How do I audit authentication, authorization, and cryptography usage in secure code reviews?▼

Auditing authentication, authorization, and cryptography usage during secure code reviews requires applying structured checklists and scanning categories. This validates that access controls and encryption implementations meet reference-backed security standards and effectively mitigate identified weaknesses.

Related Skills

Explore More Software Engineering Skills→
haabehaabe

threat-model

Conduct STRIDE threat modeling on system designs with data flows and trust boundaries.

Community
Advanced
zenobi-uszenobi-us
68

incident-responder

Coordinate incident response for security breaches and operational incidents.

Official
Advanced
FrekiManagarmFrekiManagarm

source-command-sparc-security-review

Perform static and dynamic code audits to flag security vulnerabilities.

Community
Advanced
AgLyx3AgLyx3

senior-security

Identify and analyze security threats across system components with STRIDE and DREAD.

Community
Advanced