Skip to content
TrustedSkillsbeta
Back to all skills

Security Architect

Listed
oimiragieo·vlatest·security

Designs secure cloud architectures and identifies vulnerabilities based on industry best practices and threat modeling.

Repository

Install on your platform

Showing Claude Code. One command installs this skill into any of the agents below.

  1. 1

    Run this in your project

    terminal
    $ npx skills add oimiragieo/agent-studio --skill security-architect -a claude-code

  2. Uses the open-source skills CLI and needs Node.js. Add -g to install it for your user instead of this project.

What we know about this skill

Publisher

oimiragieo

Taken from the source listing. We haven't verified who controls this account.

Install target

Live repository

Not pinned. Installing fetches whatever the repository holds at the time you run the command.

Nobody has reviewed this code. TrustedSkills indexes and links skills; it does not audit, run or scan them. A skill runs with whatever access you give your agent — read the source before you install it.

Automated safety checks

scanned

We could not read this skill's source, so none of the checks below were run.

Not scanned. none of the 73 skills in the repository match this slug — it was most likely renamed or removed upstream after the registry indexed it Source recorded as oimiragieo/agent-studio.
This is a static scan, not a review. It reads the skill's files; it does not run them, and it cannot tell you whether the skill is any good or whether the code does what its description says. A skill runs with whatever access you give your agent.
What each check looks for →

About this skill

What it does

The Security Architect skill assists in designing secure cloud architectures by leveraging industry best practices and threat modeling techniques. It specifically focuses on identifying potential vulnerabilities using STRIDE analysis, extended for AI/agentic systems to include concerns like Goal Hijacking and Memory Poisoning. Furthermore, the skill incorporates an assessment based on the OWASP Top 10 2025 list, providing a current perspective on web application security risks.

When to use it

This skill is valuable in these scenarios:

  • Designing new cloud-based applications or services.
  • Reviewing existing architectures for potential security weaknesses.
  • Performing threat modeling exercises to anticipate and mitigate risks.
  • Ensuring compliance with modern security standards, particularly the OWASP Top 10 2025.
  • Analyzing AI agent deployments to identify vulnerabilities related to adversarial prompts or tool misuse.

Key capabilities

  • STRIDE Threat Modeling: Identifies threats based on Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
  • AI/Agentic System Extensions to STRIDE: Considers Goal Hijacking, Memory Poisoning, and Tool Misuse as specific threat vectors.
  • OWASP Top 10 2025 Analysis: Evaluates architectures against the latest OWASP vulnerabilities, including newly added categories and ranking shifts.
  • Detailed Vulnerability Checks: Provides guidance on checking for specific vulnerabilities like Broken Access Control (including SSRF), Security Misconfiguration, and Software Supply Chain Failures.

Example prompts

  • "Perform a STRIDE threat model analysis for this proposed cloud architecture."
  • "Assess this application against the OWASP Top 10 2025 list, focusing on potential injection vulnerabilities."
  • "Analyze this AI agent deployment for risks related to Memory Poisoning and Goal Hijacking."

Tips & gotchas

  • OWASP Version: Ensure you are using the OWASP Top 10 2025 list; older versions (like 2021) contain outdated information.
  • Context is Key: The skill's effectiveness depends on providing detailed architectural descriptions and context for analysis.
  • Agentic System Focus: The STRIDE extensions are particularly relevant when evaluating AI agent deployments and their potential misuse.