Security Engineering
- 10 repo stars
- Updated June 5, 2026
- viktorbezdek/skillstack
Design application security — OWASP patterns, auth architecture, secrets management, and threat-model-informed code review.
About
An application-security skill covering OWASP patterns, authentication architecture, secrets management, and threat-model-informed code review. Developers use it to design and review secure systems before shipping.
- OWASP patterns
- Auth architecture
- Secrets management
- Threat-model code review
Security Engineering by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
/plugin marketplace add viktorbezdek/skillstack/plugin install security-engineering@skillstackAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| repo stars | ★ 10 |
|---|---|
| Last updated | June 5, 2026 |
| Repository | viktorbezdek/skillstack ↗ |
What it does
Design application security — OWASP patterns, auth architecture, secrets management, and threat-model-informed code review.
README.md
security-engineering
Application security design, OWASP patterns, authentication architecture, secrets management, and threat-model-informed code review.
Overview
This plugin provides the security-engineering skill for Claude Code.
Installation
Install via the SkillStack marketplace or copy this plugin directory into your Claude Code plugins folder.
Usage
Invoke by describing your task naturally. The skill activates on relevant queries.
Activates for:
- Design a JWT-based authentication system with refresh token rotation
- Review this login endpoint for security vulnerabilities
- How should I store API keys for third-party integrations?
- Implement role-based access control for our multi-tenant app
Does NOT activate for:
- Configure our AWS VPC security groups (Network/infra security — cloud-infrastructure skill)
- Help us pass our SOC2 Type II audit (Compliance audit — out of scope)
- Run a penetration test on our staging environment (Offensive/pentest — out of scope)
Domain
Engineering
Changelog
See CHANGELOG.md.
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85