Senior Security

Complete toolkit for senior security with modern tools and best practices.

Quick Start

Main Capabilities

This skill provides three core capabilities through automated scripts:

# Script 1: Threat Modeler

python scripts/threat_modeler.py [options]

# Script 2: Security Auditor

python scripts/security_auditor.py [options]

Script 3: Pentest Automator

python scripts/pentest_automator.py [options]

## Core Capabilities

### 1. Threat Modeler

Automated tool for threat modeler tasks.

**Features:**

- Automated scaffolding

- Best practices built-in

- Configurable templates

- Quality checks

**Usage:**

python scripts/threat_modeler.py <project-path> [options]

### 2. Security Auditor

Comprehensive analysis and optimization tool.

**Features:**

- Deep analysis

- Performance metrics

- Recommendations

- Automated fixes

**Usage:**

python scripts/security_auditor.py <target-path> [--verbose]

### 3. Pentest Automator

Advanced tooling for specialized tasks.

**Features:**

- Expert-level automation

- Custom configurations

- Integration ready

- Production-grade output

**Usage:**

python scripts/pentest_automator.py [arguments] [options]

## Reference Documentation

### Security Architecture Patterns

Comprehensive guide available in `references/security_architecture_patterns.md`:

- Detailed patterns and practices

- Code examples

- Best practices

- Anti-patterns to avoid

- Real-world scenarios

### Penetration Testing Guide

Complete workflow documentation in `references/penetration_testing_guide.md`:

- Step-by-step processes

- Optimization strategies

- Tool integrations

- Performance tuning

- Troubleshooting guide

### Cryptography Implementation

Technical reference guide in `references/cryptography_implementation.md`:

- Technology stack details

- Configuration examples

- Integration patterns

- Security considerations

- Scalability guidelines

## Tech Stack

**Languages:** TypeScript, JavaScript, Python, Go, Swift, Kotlin
**Frontend:** React, Next.js, React Native, Flutter
**Backend:** Node.js, Express, GraphQL, REST APIs
**Database:** PostgreSQL, Prisma, NeonDB, Supabase
**DevOps:** Docker, Kubernetes, Terraform, GitHub Actions, CircleCI
**Cloud:** AWS, GCP, Azure

## Development Workflow

### 1. Setup and Configuration

Install dependencies

npm install

or

pip install -r requirements.txt

Configure environment

cp .env.example .env

### 2. Run Quality Checks

Use the analyzer script

python scripts/security_auditor.py .

Review recommendations

Apply fixes

### 3. Implement Best Practices

Follow the patterns and practices documented in:

- `references/security_architecture_patterns.md`

- `references/penetration_testing_guide.md`

- `references/cryptography_implementation.md`

## Best Practices Summary

### Code Quality

- Follow established patterns

- Write comprehensive tests

- Document decisions

- Review regularly

### Performance

- Measure before optimizing

- Use appropriate caching

- Optimize critical paths

- Monitor in production

### Security

- Validate all inputs

- Use parameterized queries

- Implement proper authentication

- Keep dependencies updated

### Maintainability

- Write clear code

- Use consistent naming

- Add helpful comments

- Keep it simple

## Common Commands

Development

npm run dev

npm run build

npm run test

npm run lint

Analysis

python scripts/security_auditor.py .

python scripts/pentest_automator.py --analyze

Deployment

docker build -t app:latest .

docker-compose up -d

kubectl apply -f k8s/