skills.rest
Tonybleything76
Tonybleything76COMMUNITY
Explore all skills by this author →
GitHub

senior-security

Run STRIDE threat modeling and DREAD risk scoring with Python scripts.

Updated Mar 4, 2026
Search Tags:#OWASP#security#vulnerability assessment#threat modeling#STRIDE#incident response#secure architecture
One-click install
npx skills add https://github.com/Tonybleything76/more-claude-skills --skill senior-security-tonybleything76
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/Tonybleything76/more-claude-skills/tree/main/engineering-team/senior-security
Command: npx skills add https://github.com/Tonybleything76/more-claude-skills --skill senior-security-tonybleything76

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires semgrep, bandit, git-secrets, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive toolkit for identifying, analyzing, and mitigating security risks across the software development lifecycle, from design to incident response.

Core Features & Use Cases

  • Threat Modeling: Identify potential threats using STRIDE and DREAD methodologies.
  • Vulnerability Assessment: Detect and classify vulnerabilities using OWASP Top 10 and automated scanning.
  • Secure Architecture Design: Implement Zero Trust and Defense-in-Depth principles.
  • Incident Response: Guide through the steps of containing, eradicating, and recovering from security incidents.
  • Use Case: A development team is about to launch a new microservice. They can use this Skill to perform a threat model, identify potential vulnerabilities in the API design, and ensure secure coding practices are followed.

Quick Start

Analyze potential security threats for the 'user-authentication-service' component.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling using STRIDE for a new microservice?▼

Threat modeling using STRIDE identifies potential threats by categorizing risks like spoofing, tampering, and repudiation. This Skill supports STRIDE analysis and DREAD risk scoring to systematically evaluate and mitigate security risks in your microservice design.

Can I use this for vulnerability assessment and mapping findings to the OWASP Top 10?▼

Yes, vulnerability assessment is supported through automated scanning and OWASP Top 10 mapping. It leverages dependency tools like semgrep and bandit to detect, classify, and help you mitigate common security vulnerabilities in your codebase.

Do I need Python and specific scanning tools installed to run automated security analysis?▼

Yes, Python is required to execute the automated scanning and analysis scripts. The Skill depends on semgrep, bandit, and git-secrets to perform vulnerability detection and secret scanning within your development environment.

What is the best way to guide incident response workflows for a security breach?▼

Guiding incident response workflows involves structured steps for containing, eradicating, and recovering from security incidents. This Skill provides reference workflows to help teams systematically manage and resolve active security threats.

Does this support secure architecture design with Zero Trust and Defense-in-Depth principles?▼

Yes, secure architecture design is a core feature. It helps implement Zero Trust and Defense-in-Depth principles, ensuring your systems are structured to minimize attack surfaces and contain breaches effectively across the software development lifecycle.

How does DREAD risk scoring work when evaluating identified security threats?▼

DREAD risk scoring evaluates threats by rating damage potential, reproducibility, exploitability, affected users, and discoverability. This Skill uses DREAD alongside STRIDE analysis to quantify and prioritize identified security risks for mitigation.

Related Skills

Explore More Software Engineering Skills→
efiadmefiadm

security-scanning-hooks

Configure automated security scanning hooks with semgrep, bandit, and gitleaks.

Community
Intermediate
josavicentevwjosavicentevw
1

devsecops

Automate security scanning and governance across CI/CD pipelines and compliance workflows.

Community
Advanced
rbkayzrbkayz

wshobson Security Hardening Workflow

Orchestrate a multi-agent workflow for security hardening and compliance verification.

Community
Advanced
HemantSudarshanHemantSudarshan

security-auditor

Audit software security posture across code, pipelines, and deployments.

Community
Advanced