skills.rest
Szantoi
SzantoiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

senior-security

Perform STRIDE threat modeling and vulnerability assessment for application security.

Updated Apr 25, 2026
Search Tags:#security#secure coding#vulnerability assessment#threat modeling#penetration testing
One-click install
npx skills add https://github.com/Szantoi/spaceos-modules-cabinet --skill senior-security-szantoi
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/Szantoi/spaceos-modules-cabinet/tree/main/.claude/skills/senior-security
Command: npx skills add https://github.com/Szantoi/spaceos-modules-cabinet --skill senior-security-szantoi

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, semgrep, codeql, bandit, eslint, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides comprehensive security tools for threat modeling, vulnerability analysis, secure architecture design, and penetration testing, helping you ensure your applications are secure against potential threats.

Core Features & Use Cases

  • Threat Modeling: Identify and analyze security threats using the STRIDE methodology.
  • Vulnerability Assessment: Remediate security vulnerabilities in applications through automated and manual testing.
  • Secure Code Review: Review code for security vulnerabilities before deployment.
  • Incident Response: Respond to and contain security incidents efficiently.
  • Security Tools Reference: Access a curated list of recommended security tools for various needs.
  • Use Case: When you need to perform a thorough security review of a new application, this Skill can guide you through the process of threat modeling, vulnerability assessment, and secure code review.

Quick Start

Use the senior-security skill to generate a threat model for your application 'app-threat-model.yml'.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling using the STRIDE methodology for my application?▼

Threat modeling with STRIDE identifies and analyzes application security threats. This Skill guides you through spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege assessments to generate structured threat models.

What is the best way to conduct a vulnerability assessment before deployment?▼

A vulnerability assessment combines automated scanning with manual secure code review. This Skill integrates security scanners like Semgrep, CodeQL, and Bandit to detect and remediate application vulnerabilities before deployment.

Do I need Python and specific security libraries to run secure code analysis?▼

Yes, you need Python and specific security libraries including Semgrep, CodeQL, Bandit, and ESLint. These dependencies execute the static analysis, vulnerability detection, and secure architecture scanning processes.

Can I use Semgrep and CodeQL together for penetration testing and vulnerability scanning?▼

Yes, Semgrep and CodeQL are integrated for vulnerability assessment and penetration testing. They work together to perform static analysis and identify security vulnerabilities in your codebase.

How does OWASP guidance integrate into secure architecture design?▼

OWASP guidance integrates into secure architecture design by providing reference patterns for cryptography and vulnerability remediation. This Skill applies OWASP standards during threat modeling and secure code review to ensure application security.

Why should I use automated security scanning instead of only manual code review?▼

Automated security scanning with tools like Semgrep and Bandit detects vulnerabilities faster and more consistently than manual review alone. This Skill combines automated scanning with manual review guidance to identify and remediate security threats efficiently.

Related Skills

Explore More Software Engineering Skills→
vuralserhat86vuralserhat86
43

secops_core

Automate security scanning and vulnerability assessment using Trivy, Snyk, ESLint, Bandit, and Semgrep.

Community
Advanced
tchawla827tchawla827
1

senior-security

Designs threat models and security architecture using STRIDE and defense-in-depth.

Community
Advanced
SJTU-IPADSSJTU-IPADS
7

pdf

Extract text and tables from PDF documents using Python libraries.

Official
Intermediate
Fantasia1999Fantasia1999

senior-security

Perform STRIDE threat modeling and vulnerability analysis for security reviews.

Community
Advanced