skills.rest
xleliberty
xlelibertyCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

senior-security

Performs STRIDE-based threat modeling, vulnerability assessment, and automated secret scanning for codebases.

Updated Nov 3, 2016
Search Tags:#security#secure coding#vulnerability assessment#threat modeling#incident response#stride#secret scanning
One-click install
npx skills add https://github.com/xleliberty/mydotfiles --skill senior-security-xleliberty
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/xleliberty/mydotfiles/tree/main/.config/.claude/plugins/cache/claude-code-skills/engineering-skills/2.1.2/senior-security
Command: npx skills add https://github.com/xleliberty/mydotfiles --skill senior-security-xleliberty

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires argon2-cffi, bcrypt, cryptography, pyotp, qrcode, pydantic, sqlalchemy, hvac, boto3, pyjwt, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for identifying, analyzing, and mitigating security risks, helping teams build secure systems and respond effectively to threats.

Core Features & Use Cases

  • Threat Modeling: Conducts structured STRIDE analysis and DREAD risk scoring to identify vulnerabilities early in the design phase.
  • Security Workflows: Includes standardized procedures for secure architecture design, vulnerability assessments, and incident response.
  • Code & Secret Scanning: Features automated tools to detect hardcoded credentials and security flaws in source code.
  • Use Case: Use this Skill to perform a threat model on a new API service, scan your codebase for exposed AWS keys, or guide your team through a post-mortem after a security incident.

Quick Start

Use the senior-security skill to run a secret scan on the current project directory and report all findings.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform STRIDE threat modeling on a new API service?▼

To perform STRIDE threat modeling on a new API service, use this toolkit to conduct structured analysis and DREAD risk scoring, identifying vulnerabilities early in the design phase through automated workflows.

What is the best way to scan a codebase for hardcoded credentials and exposed AWS keys?▼

Scanning a codebase for hardcoded credentials and exposed AWS keys is executed through automated secret scanning scripts that analyze source code using Python 3.x regex and file system operations to report findings.

Can I use this security engineering toolkit to guide a post-mortem after a security incident?▼

You can use this security engineering toolkit to guide a post-mortem after a security incident by following its standardized incident response workflows designed for threat analysis and mitigation.

Does this vulnerability assessment tool require specific Python dependencies for cryptography and hashing?▼

This vulnerability assessment tool requires Python 3.x and relies on dependencies including argon2-cffi, bcrypt, cryptography, pyjwt, and hvac to execute its secure architecture and authentication analysis scripts.

How does DREAD risk scoring work when identifying security flaws?▼

DREAD risk scoring works by evaluating identified security flaws across structured parameters to quantify threat severity, integrating directly with STRIDE analysis to prioritize vulnerabilities during architecture design.

Related Skills

Explore More Software Engineering Skills→
EremesNGEremesNG
1

security-review

Identify security vulnerabilities and hardening opportunities in code during reviews.

Community
Advanced
tchawla827tchawla827
1

senior-security

Designs threat models and security architecture using STRIDE and defense-in-depth.

Community
Advanced
rshankrasrshankras
603

auth-flow

Generate Apple platform authentication with Sign in with Apple, biometrics, and Keychain storage.

Community
Advanced
LeoWSY-hashblueLeoWSY-hashblue
3

source-code-scanning

Scan source code for vulnerabilities, secrets, and dependency CVEs.

Community
Advanced