Security Architect
This consolidates four security practices into one workflow: STRIDE threat modeling, secure design patterns, OWASP Top 10 code review, and compliance checking for GDPR, HIPAA, SOC2, and PCI-DSS. It's built around the idea that security should be baked in from the start rather than patched in later. You'd reach for this when designing new systems or auditing existing ones where you need to think through threats, architectural decisions, code vulnerabilities, and regulatory requirements in one pass. The consolidation is smart since these concerns overlap heavily in practice. From daffy0208's ai-dev-standards repo with 28 stars and passing security audits across Gen Agent Trust Hub, Socket, and Snyk.
- GitHub stars
- 33
- last updated
- Aug 21, 2026
Install
$ npx -y skills add daffy0208/ai-dev-standards --skill 'Security Architect' --agent claude-codeInstalls into .claude/skills of the current project.
Files
Security Architect
Overview
Security Architect is a consolidated skill that covers the complete security lifecycle: threat modeling, secure design principles, secure coding practices, and regulatory compliance. It ensures security is integrated from the start, not bolted on at the end.
Consolidated from:
- threat-modeling - STRIDE threat analysis and risk assessment
- security-first-design - Security principles and secure design patterns
- secure-coding-review - OWASP Top 10 and vulnerability detection
- compliance-validator - GDPR, HIPAA, SOC2, PCI-DSS compliance
When to Use This Skill
Use Security Architect when:
- Starting a new project (design phase)
- Conducting security architecture review
- Reviewing code for security vulnerabilities
- Ensuring regulatory compliance
- Responding to security incidents
- Planning for security certifications (SOC2, ISO 27001)
- Designing authentication and authorization systems
Key Capabilities
Threat Modeling (from threat-modeling)
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/daffy0208/ai-dev-standards
- Categories
- Security, Git & Pull Requests, Code Review & Quality, AI & Agent Building, Design & UI/UX
- First seen
- Jun 3, 2026
More from daffy0208/ai-dev-standards
All 49- Security Engineer
- Supabase Developer
- Testing Strategist
- UX Designer
- Visual Designer
- Animation Designer1.9K
- Brand Designer1.3K
- 3d Visualizer670
- Data Visualizer576
- Video Producer454
- Mobile Developer416
- Iot Developer391
- Copywriter257
- Api Integration Builder244
- Product Analytics244
- Livestream Engineer212
- Customer Support Builder210
- Product Analyst206
- Quality Auditor201
- Audio Producer199
- Customer Feedback Analyzer190
- Usability Tester188
- Voice Interface Builder187
- Data Engineer181
Recommended
More Security
Pentest Commandsdavila7/claude-code-templatesThis skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan0skills.sh installs
security-testhoangnguyen0403/agent-skills-standardFast, continuous DevSecOps pipeline for Pull Requests and active branches. Runs SAST, SCA, and secrets detection to catch vulnerabilities before they merge.0skills.sh installs
mobile-pentesthypnguyen1209/offensive-claudeMobile application penetration testing — Android/iOS static/dynamic analysis, Frida instrumentation, SSL pinning bypass, root/jailbreak detection bypass, deep-l0skills.sh installs
redteam-plugin-developmentpromptfoo/promptfooStandards for creating redteam plugins and graders. Use when creating new plugins, writing graders, or modifying attack templates.0skills.sh installs
V3 Security Overhaulruvnet/rufloComplete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for sec0skills.sh installs
IDOR Vulnerability Testingsickn33/antigravity-awesome-skillsidor vulnerability testing0skills.sh installs