This skill equips Claude Code with the specialized knowledge of a senior security engineer, enabling it to perform systematic threat modeling using the STRIDE methodology, conduct vulnerability assessments based on OWASP standards, and design secure-by-default system architectures. It provides structured workflows for secure code reviews, incident response, and cryptographic implementation, ensuring that security is integrated throughout the entire software development lifecycle (SDLC) to mitigate risks like injection, broken authentication, and sensitive data exposure.
主な機能
01OWASP-aligned vulnerability assessment and remediation guidance
02Secure architecture design using defense-in-depth and Zero Trust
03Structured incident response and containment protocols
04STRIDE and DREAD threat modeling frameworks
050 GitHub stars
06Comprehensive secure code review checklists and pattern matching
