Security Principles

The security-principles skill provides foundational knowledge on protecting systems, networks, and data from unauthorized access and cyber threats. It guides agents in implementing best practices like defense in depth, least privilege, and secure coding to mitigate vulnerabilities effectively.

When to use it

• Designing a new application architecture that requires robust threat modeling.
• Auditing existing infrastructure for compliance with industry security standards.
• Developing incident response plans to handle potential data breaches.
• Educating development teams on writing secure code to prevent injection attacks.

Key capabilities

• Threat Modeling: Identifying potential attack vectors before deployment.
• Access Control: Enforcing least privilege and zero trust architectures.
• Vulnerability Management: Detecting and patching software weaknesses proactively.
• Secure Coding Practices: Applying guidelines to prevent common security flaws.

Example prompts

• "Explain the core principles of defense in depth for a cloud-native environment."
• "How can I apply the principle of least privilege to my database user roles?"
• "What are the key steps to secure an API against common injection attacks?"

Tips & gotchas

Security is not a one-time setup but a continuous process; always verify that implemented principles align with current threat landscapes. While this skill covers theoretical foundations, complex environments may require specialized tools beyond general principles.