Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.
Complete toolkit for senior security with modern tools and best practices.
This skill provides three core capabilities through automated scripts:
# Script 1: Threat Modeler
python scripts/threat_modeler.py [options]
# Script 2: Security Auditor
python scripts/security_auditor.py [options]
# Script 3: Pentest Automator
python scripts/pentest_automator.py [options]
Automated tool for threat modeler tasks.
Features:
Usage:
python scripts/threat_modeler.py <project-path> [options]
Comprehensive analysis and optimization tool.
Features:
Usage:
python scripts/security_auditor.py <target-path> [--verbose]
Advanced tooling for specialized tasks.
Features:
Usage:
python scripts/pentest_automator.py [arguments] [options]
Comprehensive guide available in references/security_architecture_patterns.md:
Complete workflow documentation in references/penetration_testing_guide.md:
Technical reference guide in references/cryptography_implementation.md:
Languages: TypeScript, JavaScript, Python, Go, Swift, Kotlin Frontend: React, Next.js, React Native, Flutter Backend: Node.js, Express, GraphQL, REST APIs Database: PostgreSQL, Prisma, NeonDB, Supabase DevOps: Docker, Kubernetes, Terraform, GitHub Actions, CircleCI Cloud: AWS, GCP, Azure
# Install dependencies
npm install
# or
pip install -r requirements.txt
# Configure environment
cp .env.example .env
# Use the analyzer script
python scripts/security_auditor.py .
# Review recommendations
# Apply fixes
Follow the patterns and practices documented in:
references/security_architecture_patterns.mdreferences/penetration_testing_guide.mdreferences/cryptography_implementation.md# Development
npm run dev
npm run build
npm run test
npm run lint
# Analysis
python scripts/security_auditor.py .
python scripts/pentest_automator.py --analyze
# Deployment
docker build -t app:latest .
docker-compose up -d
kubectl apply -f k8s/
Check the comprehensive troubleshooting section in references/cryptography_implementation.md.
references/security_architecture_patterns.mdreferences/penetration_testing_guide.mdreferences/cryptography_implementation.mdscripts/ directoryCopy a source-pinned command for your client. You run it yourself.
Destination: .claude/skills/senior-security · pinned to the source commit
# Run from your project root
git clone https://github.com/davila7/claude-code-templates.git .skillboard-tmp
git -C .skillboard-tmp checkout 5cc17cf267132cc690dee82239b80a99ec82e4f8
mkdir -p ".claude/skills"
cp -r ".skillboard-tmp/cli-tool/components/skills/development/senior-security" ".claude/skills/"
rm -rf .skillboard-tmpReview the source before running. This copies files into your project; it is not a one-click install and does not verify runtime safety.
sudo apt update && sudo apt install -y gitnpm install -g @anthropic-ai/claude-code# Run from your project root
git clone https://github.com/davila7/claude-code-templates.git .skillboard-tmp
git -C .skillboard-tmp checkout 5cc17cf267132cc690dee82239b80a99ec82e4f8
mkdir -p ".claude/skills"
cp -r ".skillboard-tmp/cli-tool/components/skills/development/senior-security" ".claude/skills/"
rm -rf .skillboard-tmpDestination: .claude/skills/senior-security
Scanner static-checks@0.1.0 · commit 5cc17cf26713. Static checks cannot prove runtime safety – review the source and the exact diff before installing. How checks work.
References credentials, tokens or secret files that a skill should not need.
Evidence: [redacted]· fingerprint e9cbb0224c4a3d23
Instructs shell/process/package operations that run commands on the host.
Evidence: npm install· fingerprint 3a2dc0ae21eb56d7