senior-security

Coordinates security workflows for architecture design, threat modeling, auditing, and cryptography across SDLC phases.

35|13|Updated Dec 12, 2025
One-click install
npx skills add https://github.com/wildwasser/opencode-agents --skill senior-security-wildwasser
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/wildwasser/opencode-agents/tree/main/.opencode/skills/senior-security
Command: npx skills add https://github.com/wildwasser/opencode-agents --skill senior-security-wildwasser

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Designing and maintaining robust security across software projects is complex, time-consuming, and prone to gaps. This Skill provides a structured toolkit to unify architecture reviews, threat modeling, auditing, and cryptography practices, reducing manual overhead and ensuring repeatable security workflows.

Core Features & Use Cases

  • Threat Modeler: automated threat modeling to rapidly identify risks in system designs and generate actionable mitigations.
  • Security Auditor: end-to-end assessments that surface vulnerabilities, quantify risk, and prescribe remediation.
  • Pentest Automator: end-to-end automation for penetration testing workflows, evidence collection, and reporting.
  • Compliance & Governance: templates and checklists to support regulatory and internal policy compliance.

Quick Start

Initialize a security assessment on a new project by running threat_modeler.py against its codebase to generate a prioritized security roadmap.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate threat modeling for my software architecture?

Automated threat modeling identifies risks in system designs and generates actionable mitigations. You can initialize an assessment by running the threat modeling script against your codebase to produce a prioritized security roadmap.

What is the best way to prepare for a compliance audit across software projects?

Compliance and governance preparation uses structured templates and checklists to support regulatory and internal policy compliance. This enforces reproducible tooling and rigorous validation of security controls to ensure audit readiness.

Can I automate penetration testing workflows and evidence collection?

Penetration testing automation handles end-to-end workflows, evidence collection, and reporting. This structured approach reduces manual overhead and ensures repeatable security workflows during security assessments.

How does a security auditor surface vulnerabilities and quantify risk?

A security auditor performs end-to-end assessments that surface vulnerabilities, quantify risk, and prescribe remediation. It applies structured workflows and best-practice patterns to validate security controls across software projects.

Do I need prior security tooling setup to run architecture design reviews?

No external dependencies are required to run architecture design reviews. The toolkit provides defined scripts and references internally to enforce structured workflows and reproducible security tooling for your project.