cyberneticlibrary

Audit code and infrastructure for security

security-reviewerskillsetup L29,726
Jeffallan/claude-skills
What it does

Review and recommend security improvements

Best for

Building strategic security improvements across engineering teams and infrastructure.

Inputs
  • · Current security posture assessment, threat landscape for organization, compliance requirements
Outputs
  • · Prioritized security roadmap: infrastructure hardening, authentication/authorization improvements, data protection, incident response
Requires
  • · Threat modeling frameworks (STRIDE, PASTA)
  • · Compliance frameworks (ISO 27001, SOC 2)
  • · Security assessment tools
Preconditions

Organization structure and systems mapped; risk appetite defined

Failure modes

Recommendations may be impractical if organizational constraints not understood; roadmap may be too ambitious or insufficiently ambitious

Trust signals
  • · Risk scoring methodology
  • · Compliance-aligned recommendations
  • · Implementation difficulty estimates