Skill UI

Master secure authentication and authorization implementation using industry-standard patterns. Covers user login systems, REST/GraphQL API security, OAuth2, SSO, session management, and RBAC design. Includes guidance on token lifecycle, secrets storage, and threat modeling to protect resource access boundaries effectively.

Harden self-hosted OpenClaw deployments with threat modeling, host baselines, runtime controls, secret management, network segmentation, and recovery workflows.

Expert security auditor for DevSecOps, application security, and compliance. Performs threat modeling, vulnerability assessment, secure code review, and CI/CD security integration to build resilient, compliant systems.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

This skill involves conducting threat modeling using the STRIDE methodology to identify potential security threats, assess risks, and design appropriate security controls. It is essential when designing secure systems, making architectural changes, or preparing for security audits. The process includes analyzing data flows, identifying trust boundaries, and mitigating risks related to spoofing, tampering, repudiation, information disclosure, denial of service, and privilege escalation.

This skill specializes in threat modeling methodologies like STRIDE and PASTA for security architecture reviews and risk assessment. It helps identify attack vectors, prioritize security risks, and design mitigation strategies to build secure-by-design systems. Ideal for security audits and system design phases.