What problem does it solve? Security work like threat modeling, vulnerability assessment, and secret detection is often skipped or done inconsistently because it requires deep expertise and structured methodology. This Skill provides repeatable workflows for threat modeling, secure code review, incident response, and cryptography implementation. ## Core Features & Use Cases - Threat Modeling: Apply STRIDE analysis to data flow diagrams with DREAD risk scoring and mitigation mapping. - Secret Scanning: Run the included secret_scanner.py script to detect hardcoded AWS keys, GitHub tokens, private keys, and passwords across 20+ patterns. - Secure Architecture & Crypto Guidance: Reference guides cover Zero Trust, defense-in-depth, OAuth 2.0 + PKCE, AES-256-GCM, Argon2id password hashing, and key management. - Use Case: Before shipping a new API, run a STRIDE threat model on its components, scan the repository for leaked credentials, and review authentication code against the OWASP Top 10 checklist. ## Quick Start Ask the assistant to conduct a STRIDE threat model of your authentication service and scan the project directory for hardcoded secrets.
