Skills senior-architect

📦

senior-architect

Name: senior-architect
Author: alirezarezvani

Content revision r1 Safe 📁 Filesystem access⚙️ External commands

Design Scalable Software Architecture

Complex product teams need clear architecture choices before implementation starts. This skill helps Claude, Codex, and Claude Code compare stacks, plan workflows, and document decisions.

Supports: Claude Codex Code(CC)

🥈 80 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "senior-architect" from https://skillstore.io/skills/alirezarezvani-senior-architect.md and its manifest at https://skillstore.io/api/skills/alirezarezvani-senior-architect/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/alirezarezvani-senior-architect.md Signed manifest GET /api/skills/alirezarezvani-senior-architect/manifest Signed lockfile GET /api/skills/alirezarezvani-senior-architect/lockfile

Test it

Using "senior-architect". Plan a customer dashboard for a SaaS product.

Expected outcome:

Recommended architecture: Next.js frontend, Node.js API, PostgreSQL database, and background jobs.
Tradeoffs: faster delivery with managed services, with vendor dependency risk.
Next steps: confirm scale targets, auth requirements, and reporting latency.

Using "senior-architect". Compare GraphQL and REST for a mobile app backend.

Expected outcome:

Decision frame: REST is simpler for stable resources; GraphQL helps varied mobile views.
Risks: GraphQL requires stronger query limits and monitoring.
Recommendation: choose REST unless clients need flexible nested reads.

Security Audit

Safe

v8 • 7/9/2026 Open versioned report

Several command examples and user-controlled output paths are confirmed medium-risk because they can modify local files or environments if executed. Most other static hits are false positives caused by Markdown code fences, inline file references, or anti-pattern headings. No prompt injection, data exfiltration, network access, or hidden command execution intent was found.

Files scanned

867

Lines analyzed

Review items

False positives ignored

Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

scripts/architecture_diagram_generator.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON results to any path supplied through --output without an overwrite check. This is user-directed, but it can overwrite local files if executed carelessly.

Medium

scripts/dependency_analyzer.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON results to any path supplied through --output without an overwrite check. This is legitimate output handling, but it carries local file overwrite risk.

Medium

scripts/project_architect.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON results to any path supplied through --output without an overwrite check. The behavior is visible, but it can still modify arbitrary writable files.

Medium

SKILL.md:16-25

Ruby/shell backtick execution

```bash

The Markdown block instructs users or agents to run the included Python scripts. The commands are visible and local, but they still execute code from a community skill.

Medium

SKILL.md:40-42

Ruby/shell backtick execution

```bash

The usage example directs execution of a local Python script against a project path. It is not obfuscated, but it is still external command execution by the skill workflow.

Medium

SKILL.md:55-57

Ruby/shell backtick execution

```bash

The usage example directs execution of the project_architect.py script on a target path. The command is visible, but it executes local community-provided code.

Medium

SKILL.md:70-72

Ruby/shell backtick execution

```bash

The usage example directs execution of dependency_analyzer.py. The command is not hidden, but it still asks the agent or user to run local code.

Medium

SKILL.md:119-127

Ruby/shell backtick execution

```bash

The setup block instructs dependency installation and creation of a local .env file. These common commands can modify the workspace and execute package lifecycle hooks.

Medium

SKILL.md:131-137

Ruby/shell backtick execution

```bash

The quality check example directs execution of project_architect.py in the current directory. It is visible, but still runs local code from the skill package.

Medium

SKILL.md:174-189

Ruby/shell backtick execution

```bash

The common commands block includes npm, Python script, Docker, docker-compose, and kubectl commands. If executed, these can change local services or deployment targets.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/alirezarezvani-senior-architect/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/alirezarezvani-senior-architect/security.svg)](https://skillstore.io/skills/alirezarezvani-senior-architect?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/alirezarezvani-senior-architect?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/alirezarezvani-senior-architect/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/alirezarezvani-senior-architect.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

alirezarezvani. (2026). senior-architect security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/alirezarezvani-senior-architect/audits/8

BibTeX citation

@techreport{alirezarezvani-alirezarezvani-senior-architect-2026,
  author = {alirezarezvani},
  title = {senior-architect security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/alirezarezvani-senior-architect/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "senior-architect security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "alirezarezvani"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/alirezarezvani-senior-architect/audits/8"
identifiers:
  - type: other
    value: "skillstore:alirezarezvani-senior-architect:audit:8"
    description: "Skillstore immutable audit report identifier"

Compare variants

3 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

davila7 Recommended

davila7-senior-architect

Skillstore Score 82

Evidence Confidence High

Skillstore usage 16

Updated

2026-08-21

sickn33

sickn33-senior-architect

Skillstore Score 81

Evidence Confidence High

Skillstore usage 27

Updated

2026-08-21

alirezarezvani Current

alirezarezvani-senior-architect

Skillstore Score 80

Evidence Confidence High

Skillstore usage 64

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan a New Product Architecture

Define core services, data stores, integrations, and tradeoffs before a team starts implementation.

Review an Existing Project Direction

Check architecture assumptions, quality practices, and missing decision records during a technical review.

Standardize Architecture Discussions

Give teams a repeatable structure for comparing stacks, documenting risks, and recording decisions.

Try These Prompts

Map My System

Review this product idea and propose a simple architecture. Include main components, data stores, external services, and two risks. Context: [describe product].

Compare Stack Options

Compare these technology options for my project. Explain fit, tradeoffs, team impact, and operational risk. Options: [list options]. Constraints: [list constraints].

Review Architecture Risks

Review this proposed architecture for scalability, security, maintainability, and cost risk. Provide prioritized findings and practical next steps. Architecture: [describe design].

Create Decision Package

Create an architecture decision package for this initiative. Include context, decision drivers, options, recommendation, rejected alternatives, risks, mitigations, and rollout plan. Initiative: [describe].

Best Practices

Share goals, constraints, traffic expectations, data sensitivity, and team skills before asking for a design.
Use the scripts only on trusted local projects and review any file output path before running them.
Record final decisions as architecture decision records with owners and review dates.

Avoid

Asking for a full architecture without product goals, scale targets, or compliance constraints.
Running deployment or install commands from examples without checking the project and environment.
Treating generic reference templates as final production guidance.