security-first-design

What problem does it solve?

This Skill systematically evaluates and mitigates security risks early in the design phase, preventing vulnerabilities from being introduced into new features or systems. It significantly reduces the cost and effort of fixing security issues later by addressing them proactively.

Core Features & Use Cases

• Five-Phase Security Analysis: Guides through attack surface mapping, threat modeling, secret management audit, input validation design, and a final security checklist, ensuring comprehensive coverage.
• OWASP Top 10 Integration: Explicitly reviews common web application security risks like injection, broken authentication, and sensitive data exposure, aligning with industry standards.
• Proactive Risk Mitigation: Ensures secrets are handled correctly, input is rigorously validated, and the principle of least privilege is applied, building security into the core design.
• Use Case: You're designing a new user authentication service. This skill will guide the AI to perform a thorough security review, identifying potential attack vectors, ensuring proper secret management, and recommending robust input validation, making your service secure by design and saving you from future breaches.

Quick Start

Apply the security-first-design skill to my proposed authentication system. Focus on attack surface mapping and secret management.