Skill UI

This skill performs comprehensive security audits, threat modeling using STRIDE/PASTA, and infrastructure hardening. It supports Red/Blue Team exercises, OWASP compliance checks, code reviews, and incident response planning. Ideal for securing projects, identifying vulnerabilities, and ensuring robust security posture across development and operational environments.

This skill provides defense-in-depth security controls for AI agents, covering prompt injection detection, input validation, tool abuse prevention, data exfiltration mitigation, and privilege escalation protection. It includes threat modeling with STRIDE, code examples for input sanitization, and guidance for secure agent deployment.

This skill enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding. It applies First Principles and 5 Whys at a micro scale to maintain a stable mental model. Used for security auditing, architecture review, and threat modeling to reduce hallucinations and ensure bottom-up understanding.

Master secure authentication and authorization implementation using industry-standard patterns. Covers user login systems, REST/GraphQL API security, OAuth2, SSO, session management, and RBAC design. Includes guidance on token lifecycle, secrets storage, and threat modeling to protect resource access boundaries effectively.

Comprehensive hardening guide for Model Context Protocol (MCP) servers, covering threat modeling, transport encryption (TLS/mTLS), OAuth 2.1 authentication, tool authorization, input validation, and audit logging to secure AI agent integrations.

Harden self-hosted OpenClaw deployments with threat modeling, host baselines, runtime controls, secret management, network segmentation, and recovery workflows.

Expert security auditor for DevSecOps, application security, and compliance. Performs threat modeling, vulnerability assessment, secure code review, and CI/CD security integration to build resilient, compliant systems.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

This skill involves conducting threat modeling using the STRIDE methodology to identify potential security threats, assess risks, and design appropriate security controls. It is essential when designing secure systems, making architectural changes, or preparing for security audits. The process includes analyzing data flows, identifying trust boundaries, and mitigating risks related to spoofing, tampering, repudiation, information disclosure, denial of service, and privilege escalation.

This skill specializes in threat modeling methodologies like STRIDE and PASTA for security architecture reviews and risk assessment. It helps identify attack vectors, prioritize security risks, and design mitigation strategies to build secure-by-design systems. Ideal for security audits and system design phases.