skills.rest
alessioroberto82
alessioroberto82COMMUNITY
Explore all skills by this author →
GitHub

security

Audits software architecture for vulnerabilities using STRIDE threat modeling and OWASP Top 10 checks.

1|Updated Feb 19, 2026
Search Tags:#owasp#vulnerability assessment#threat modeling#compliance#security audit#stride#risk analysis
One-click install
npx skills add https://github.com/alessioroberto82/claude-plugin-circle --skill security-alessioroberto82
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/alessioroberto82/claude-plugin-circle/tree/main/plugins/circle/skills/security
Command: npx skills add https://github.com/alessioroberto82/claude-plugin-circle --skill security-alessioroberto82

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Teams often ship code without a structured security review, missing vulnerabilities in authentication, data handling, and configuration until they become incidents. This Skill performs a systematic security audit of your architecture before implementation begins. ## Core Features & Use Cases - Threat Modeling: Applies STRIDE analysis to each system component (auth, API, database, storage) to identify spoofing, tampering, and privilege escalation risks. - OWASP Top 10 Assessment: Evaluates the architecture against all ten OWASP categories, from broken access control to SSRF. - Risk-Prioritized Findings: Classifies every finding as P0-P3 severity and issues a gate verdict (SECURITY BLOCK, PASS with warnings, or PASS) that determines whether implementation can proceed. - Use Case: After your Architecture Owner produces a design document, run this Skill to generate a security-audit.md report with a remediation roadmap before any code is written. ## Quick Start Run a security audit on the current project architecture and generate a prioritized findings report.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my software architecture?▼

Provide an architecture document (from a prior architecture step) and the Skill applies STRIDE threat modeling to each component plus an OWASP Top 10 check. It writes a security-audit.md report with P0-P3 severity findings and a remediation roadmap.

What is STRIDE threat modeling used for?▼

STRIDE threat modeling identifies six attack categories per component: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. It is applied here to auth, API, database, and storage components.

Does this security audit work for business or personal projects?▼

Yes, the Skill detects the project domain from marker files. Business projects get a compliance report covering GDPR, CCPA, and vendor risk; personal projects get a privacy audit covering passwords, 2FA, and digital footprint.

What happens when a critical vulnerability is found?▼

Any P0 finding triggers a SECURITY BLOCK verdict, meaning implementation must not proceed until the issue is fixed. P1 findings produce a PASS with warnings, allowing implementation to proceed while fixes happen in parallel.

What inputs are required before running a security audit?▼

The audit requires an architecture document at output/arch/architecture.md, and optionally requirements or PRD files. If the architecture is missing, the Skill instructs you to run the architecture step first.

Related Skills

Explore More Software Engineering Skills→
I-OnlabsI-Onlabs
3

pipeline-arch-review

Transform user stories into architecture decisions and ADR documentation.

Community
Advanced
ferdiangunawanferdiangunawan
6

audit-performance

Detect and categorize P0, P1, and P2 performance issues in code.

Community
Advanced
MrAlexisCordMrAlexisCord

QA Strategy Skill

Design and execute QA strategies with test planning and CI/CD quality gates.

Community
Advanced
Next-ofkinNext-ofkin
1

code-review-ai-ai-review

Automate code review with static analysis and AI models.

Community
Advanced