skills.rest
zhangzhang-111-i
zhangzhang-111-iCOMMUNITY
Explore all skills by this author →
GitHub

senior-security

Model threats with STRIDE and DREAD for security reviews.

2|Updated Mar 13, 2026
Search Tags:#security#vulnerability assessment#threat modeling#penetration testing#incident response#secure architecture
One-click install
npx skills add https://github.com/zhangzhang-111-i/claude-skills111 --skill senior-security-zhangzhang-111-i
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/zhangzhang-111-i/claude-skills111/tree/main/engineering-team/senior-security
Command: npx skills add https://github.com/zhangzhang-111-i/claude-skills111 --skill senior-security-zhangzhang-111-i

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive toolkit to address security challenges, from identifying vulnerabilities and modeling threats to designing secure architectures and responding to incidents.

Core Features & Use Cases

  • Threat Modeling: Utilize STRIDE and DREAD methodologies to systematically identify and prioritize security risks.
  • Secure Architecture Design: Implement defense-in-depth and Zero Trust principles for robust system design.
  • Vulnerability Assessment & Code Review: Employ automated and manual techniques to find and fix security flaws.
  • Incident Response: Follow structured workflows for containing, eradicating, and recovering from security incidents.
  • Use Case: A development team is about to launch a new web application. They can use this Skill to perform a threat model, conduct a security architecture review, and review their code for common vulnerabilities before deployment.

Quick Start

Use the senior-security skill to conduct a threat model for the new user authentication service.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling for a new application service?▼

Threat modeling for new applications uses STRIDE and DREAD methodologies to systematically identify and prioritize security risks. This approach evaluates spoofing, tampering, and information disclosure threats to calculate risk scores for architecture components.

What is defense-in-depth and how does it apply to secure architecture design?▼

Defense-in-depth is a secure architecture strategy implementing multiple layered security controls to protect systems. Combined with Zero Trust principles, it enforces strict identity verification and continuous validation across all network segments.

How do I conduct a vulnerability assessment and security code review?▼

Vulnerability assessments and security code reviews use automated and manual techniques with secure coding checklists to find and fix flaws. This process identifies common vulnerabilities, analyzes the attack surface, and remediates CVEs.

What are the steps for incident response in a security breach?▼

Incident response follows structured workflows for containing, eradicating, and recovering from security incidents. This process isolates active threats, removes vulnerabilities, and restores affected systems to operational status.

Can I use this security toolkit for pre-deployment web application audits?▼

Yes, this security toolkit supports pre-deployment web application audits. Teams can perform threat models, execute security architecture reviews, and evaluate code for common vulnerabilities before launching applications.

When should I use DREAD scoring versus STRIDE analysis for security reviews?▼

Use STRIDE analysis during security reviews to categorize security threat types across system components. Apply DREAD scoring afterward to prioritize identified threats by evaluating damage, reproducibility, exploitability, affected users, and discoverability.

Related Skills

Explore More Software Engineering Skills→
florianbuetowflorianbuetow
12

pasta-threats

Profile threat actors and map MITRE ATT&CK techniques to system threats.

Community
Advanced
dapperdiversdapperdivers
1

cve-deep-dive

Analyze CVE vulnerabilities to produce security intelligence and risk assessments.

Community
Advanced
BagelHoleBagelHole
46

sast-scanning

Performs static security testing on source code using Semgrep, CodeQL, and SonarQube.

Community
Intermediate
DammianMillerDammianMiller
1

adversarial

Enumerate and test attack vectors to bypass security controls.

Community
Advanced