senior-security

Perform STRIDE threat analysis and OWASP-guided vulnerability assessments.

Updated Jun 27, 2026
One-click install
npx skills add https://github.com/truongnat/aix --skill senior-security-truongnat
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/truongnat/aix/tree/main/content/skills/senior-security
Command: npx skills add https://github.com/truongnat/aix --skill senior-security-truongnat

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing.

Core Features & Use Cases

  • Threat Modeling: Offers STRIDE analysis and OWASP guidance for systematic security threat identification.
  • Vulnerability Analysis: Conducts automated and manual scans to identify and assess vulnerabilities.
  • Secure Architecture: Assists in designing secure systems using defense-in-depth principles and Zero Trust architecture.
  • Penetration Testing: Guides through the penetration testing process to uncover security flaws.
  • Use Case: Use this Skill to perform a thorough security assessment of your application, identifying potential vulnerabilities and proposing mitigations.

Quick Start

Use the 'senior-security' skill to perform a STRIDE threat analysis on your application.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform STRIDE threat modeling for application security?

STRIDE threat modeling systematically identifies security threats by categorizing them into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. This process uncovers potential application vulnerabilities and proposes structured mitigations.

What is the best way to conduct vulnerability analysis and security scanning?

Vulnerability analysis combines automated and manual security scanning to identify and assess system flaws. This approach evaluates application security risks systematically, enabling developers to prioritize and implement effective mitigations against discovered vulnerabilities.

How does Zero Trust architecture apply to secure system design?

Zero Trust architecture secures systems by enforcing strict identity verification and never trusting any entity by default. Combined with defense-in-depth principles, it creates layered security architectures that protect application assets from unauthorized access.

Can I use OWASP guidance for manual penetration testing?

OWASP guidance provides structured methodologies for manual penetration testing to uncover application security flaws. It complements automated scans by offering systematic threat identification processes tailored for security engineers focusing on application vulnerabilities.

When do I need cryptography analysis in security engineering?

Cryptography analysis is needed when designing secure architectures that require data protection and secure communication. It evaluates encryption implementations to ensure application security against information disclosure and unauthorized tampering threats.