What does this skill do?

The Senior Security skill performs threat modeling with STRIDE and DREAD and acts as a security routing dispatcher — it owns threat modeling and routes everything else to specialist skills.

It scopes assets and trust boundaries, generates a threat model per component with STRIDE categories and DREAD scores, prioritizes by risk, and runs quick secret scans.

It applies a verification gate — every data-flow element evaluated, high-risk threats owned and mitigated, and secret scans clean — and maps follow-up work to the right sibling skill.

  • Runs STRIDE threat modeling per data-flow element

  • Scores risk with DREAD and prioritizes owners

  • Scans for secrets and blocks on high findings

  • Routes pen-testing, incident response, and more to specialists

How it works

1

Scope the system

The agent defines assets, trust boundaries, and data flows — external entities, processes, data stores, and flows.

2

Generate the threat model

It produces a STRIDE category per threat with DREAD scores and mitigations for each data-flow element.

3

Prioritize and scan

It sorts threats by DREAD, assigns owners to high-risk items, and runs a secret scan that blocks merges on high or critical findings.

4

Verify and route

It confirms the verification gate and routes follow-up — pen-testing, incident response, cloud security — to the right specialist skill.

Best use cases for this skill

  • Threat modeling: Run a STRIDE/DREAD threat model for a component.

  • Secret scanning: Scan a project for exposed credentials.

  • Design review: Evaluate a data-flow diagram for threats before approval.

  • Routing: Direct a security request to the right specialist skill.

Frequently asked questions

What does the Senior Security skill do?

It performs STRIDE threat modeling and DREAD risk scoring, does data-flow-diagram threat analysis and quick secret scans, and routes other security work to specialist skills.

When should an agent use it?

Use it for STRIDE threat modeling, DREAD risk assessments, data-flow threat analysis, a quick secret scan, or to route a security request to the right specialist.

What is its verification gate?

Every data-flow element has at least one STRIDE row evaluated, every threat scoring high on DREAD has an owner and mitigation, and the secret scan exits with zero high or critical findings.

What does it not do itself?

It owns threat modeling and routes other domains — pen-testing, incident response, cloud posture, red team, AI security, threat hunting, secure code review — to sibling specialist skills.

Use from source

Ask your Buda agent to install this community skill.

Copy this prompt into your own Buda agent. It includes the source repository and install command so the agent can complete the setup in natural language.

Prompt to send to your Buda agent
Please install the "Senior Security Skill" skill into this Buda agent.

Source repository: https://github.com/alirezarezvani/claude-skills
Install command: npx skills add alirezarezvani/claude-skills --skill senior-security -y -a universal

Please run the install command, verify the skill is available, and tell me any setup notes or follow-up steps from the source repository.
Explore marketplace

Install workflow

  1. 1Copy the prompt
  2. 2Send it to your Buda agent
  3. 3Done