Agent skill · security · daffy0208
Security Architect
Comprehensive security architecture combining threat modeling, security-first design, secure coding review, and compliance validation. Consolidated from threat-modeling, security-first-design, secure-coding-review, and compliance-validator.
Why this skill is useful
Provides domain-specific knowledge on security architecture and compliance frameworks that the AI wouldn't reliably generate on its own.
What it needs
About 11k tokens when loaded. Last updated 2025-12-25. 33 stars on the source repository.
What this skill does
Security Architect Overview Security Architect is a consolidated skill that covers the complete security lifecycle: threat modeling, secure design principles, secure coding practices, and regulatory compliance. It ensures security is integrated from the start, not bolted on at the end. Consolidated from: threat-modeling - STRIDE threat analysis and risk assessment security-first-design - Security principles and secure design patterns secure-coding-review - OWASP Top 10 and vulnerability detection compliance-validator - GDPR, HIPAA, SOC2, PCI-DSS compliance When to Use This Skill Use Security Architect when: Starting a new project (design phase) Conducting security architecture review Reviewing code for security vulnerabilities Ensuring regulatory compliance Responding to security incidents Planning for security certifications (SOC2, ISO 27001) Designing authentication and authorization systems Key Capabilities Threat Modeling (from threat-modeling) Apply STRIDE methodology for threat identification Assess risk levels (Likelihood × Impact) Create threat models and mitigation plans Identify attack surfaces and trust boundaries Security Design (from security-first-design) Apply security principles (Defense in Depth, Least Privilege, Zero Trust) Design secure authentication and authorization Implement encryption and key management Design secure APIs and data protection Secure Coding (from secure-coding-review) Review code against OWASP Top 10 Detect injection vulnerabilities (SQL, XSS, command) Identify broken authentication and access control Ensure secure data handling and validation Compliance (from compliance-validator) Ensure GDPR, HIPAA, CCPA, SOC2, PCI-DSS compliance Implement data subject rights (access, erasure, portability) Design audit logging and retention policies Configure encryption and access controls Workflow Part 1: Threat Modeling (STRIDE) STRIDE Framework S - Spoofing (Authentication) Threat: Attacker impersonates a user or system Examples: Stolen cr …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills daffy0208/security-architect