senior-security

Boundary

This skill provides security engineering guidance for threat modeling, vulnerability analysis, secure architecture, and penetration testing. It focuses on STRIDE analysis, OWASP guidance, cryptography patterns, and security scanning tools. It does NOT cover infrastructure security (use security-pro), DevSecOps pipelines (use ci-cd-pro), or application-specific security (use nextjs-security-scan for Next.js).

When to use

Use this skill when:

• Performing threat modeling
• Conducting STRIDE analysis
• Designing secure architecture
• Performing penetration testing
• Conducting vulnerability assessment
• Implementing secure coding practices
• Applying OWASP guidelines
• Implementing cryptography
• Scanning for secrets
• Conducting security audits
• Implementing zero trust