Skills senior-security

📦

senior-security

Name: senior-security
Author: alirezarezvani

Content revision r1 Safe ⚙️ External commands📁 Filesystem access

Strengthen Application Security Reviews

Security reviews often lack consistent checklists and reusable workflows. This skill provides security review scaffolds, reference guidance, and simple reporting scripts for Claude, Codex, and Claude Code.

Supports: Claude Codex Code(CC)

🥈 81 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "senior-security" from https://skillstore.io/skills/alirezarezvani-senior-security.md and its manifest at https://skillstore.io/api/skills/alirezarezvani-senior-security/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/alirezarezvani-senior-security.md Signed manifest GET /api/skills/alirezarezvani-senior-security/manifest Signed lockfile GET /api/skills/alirezarezvani-senior-security/lockfile

Test it

Using "senior-security". Review a backend service before release.

Expected outcome:

Summary of exposed entry points and sensitive data paths.
List of likely threats, missing controls, and review questions.
Suggested next actions for owners and security reviewers.

Using "senior-security". Prepare a scoped penetration testing plan.

Expected outcome:

Testing objective, approved target list, and explicit exclusions.
Phased workflow for discovery, validation, evidence capture, and reporting.
Safety notes for rate limits, test accounts, and rollback coordination.

Using "senior-security". Assess a cryptography implementation proposal.

Expected outcome:

Review of key generation, storage, rotation, and recovery assumptions.
Questions about algorithm choice, library use, and misuse resistance.
Recommended controls for logging, monitoring, and incident response.

Security Audit

Safe

v6 • 7/5/2026 Open versioned report

Most static findings are parser noise from markdown code fences, inline path references, and prior evaluation text. The included scripts only validate paths and optionally write user-requested JSON reports; no prompt injection, exfiltration, or command execution logic was found.

Files scanned

1,354

Lines analyzed

Review items

False positives ignored

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/alirezarezvani-senior-security/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/alirezarezvani-senior-security/security.svg)](https://skillstore.io/skills/alirezarezvani-senior-security?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/alirezarezvani-senior-security?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/alirezarezvani-senior-security/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/alirezarezvani-senior-security.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

alirezarezvani. (2026). senior-security security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/alirezarezvani-senior-security/audits/6

BibTeX citation

@techreport{alirezarezvani-alirezarezvani-senior-security-2026,
  author = {alirezarezvani},
  title = {senior-security security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/alirezarezvani-senior-security/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "senior-security security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "alirezarezvani"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/alirezarezvani-senior-security/audits/6"
identifiers:
  - type: other
    value: "skillstore:alirezarezvani-senior-security:audit:6"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

alirezarezvani Recommended Current

alirezarezvani-senior-security

Skillstore Score 81

Evidence Confidence High

Skillstore usage 24

Updated

2026-08-21

davila7

davila7-senior-security

Skillstore Score 81

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Start a Threat Model

Create a structured first pass over assets, trust boundaries, and likely abuse cases.

Standardize AppSec Reviews

Use one repeatable workflow for lightweight application security checks across repositories.

Prepare an Authorized Test

Organize scope, assumptions, and report structure before an approved penetration test.

Try These Prompts

Review a Service

Use senior-security to review this service at a high level. Identify assets, trust boundaries, common risks, and next review steps.

Create a Threat Model

Build a threat model for this architecture. Cover entry points, data stores, actor goals, mitigations, and open security questions.

Plan an Authorized Test

Prepare a penetration testing plan for this approved scope. Include boundaries, test phases, expected evidence, and reporting format.

Assess Crypto Design

Review this cryptography design. Check key handling, algorithm choices, rotation, storage, failure modes, and operational monitoring.

Best Practices

Define authorization, scope, and expected output before using security workflows.
Treat script output as a starting point and verify findings manually.
Store generated reports in a controlled project directory with appropriate access controls.