Security Architect

The security-architect skill empowers AI agents to design robust, secure system architectures and generate comprehensive security documentation. It assists in identifying potential vulnerabilities within proposed infrastructure before deployment.

When to use it

• Planning new cloud-native applications requiring strict compliance with industry standards.
• Reviewing high-level system designs for gaps in authentication or data encryption strategies.
• Generating initial blueprints for Zero Trust network implementations.
• Creating security policy documents and architectural decision records (ADRs).

Key capabilities

• Generates secure architecture diagrams and structural layouts.
• Produces detailed security documentation including threat models.
• Identifies common design flaws related to access control and data flow.
• Aligns system designs with specific regulatory frameworks.

Example prompts

• "Design a secure microservices architecture for a fintech payment gateway, ensuring PCI-DSS compliance."
• "Create a threat model diagram for a new IoT device management platform using STRIDE methodology."
• "Draft an architectural decision record (ADR) justifying the choice of mutual TLS over HTTP headers for internal service communication."

Tips & gotchas

This skill focuses on high-level design and documentation rather than writing specific exploit code or performing runtime penetration testing. Ensure you provide context about your target compliance standards (e.g., GDPR, HIPAA) to get relevant architectural recommendations.