security-engineer

Security Engineer & AppSec specialist focused on threat modeling, code security, and compliance.

IndexedGPL-3.0

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/nextappcode-security-engineer

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Security Engineer & AppSec specialist focused on threat modeling, code security, and compliance. Use this skill for auditing, securing secrets, and protecting against vulnerabilities.

Use cases: security

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools: No tools found
Secrets: None asked for
Install scripts: None found
Runs as: Python package

Network hosts it talks to 1

codeload.github.com · found in install command

Files it touches

~/.claude/skills/security-engineer

What's inside

Skill name: security-engineer
Description: Security Engineer & AppSec specialist focused on threat modeling, code security, and compliance. Use this skill for auditing, securing secrets, and protecting against vulnerabilities.
License: GPL-3.0
Instructions: 20 lines in SKILL.md · view on GitHub

Before installing

Ships executable scripts

Files (2)

SKILL.md
audit_secrets.py · scripts/

SKILL.md (first lines)

# Security Engineer / AppSec Skill

This skill ensures that security is baked into the development lifecycle (DevSecOps) and meets industrial standards.

## When to use this skill

- When performing threat modeling for new features.
- When auditing code for OWASP Top 10 vulnerabilities.
- When managing secrets, environment variables, and certificates.
- When ensuring compliance with ISO 27001, SOC 2, or PCI-DSS.
- When configuring firewalls, WAFs, and secure networking.

## Core Responsibilities

1. **Threat Modeling**: Identify potential attack vectors early in the design phase.
2. **Secure Coding**: Enforce practices to prevent SQLi, XSS, CSRF, and broken access control.
3. **Secret Management**: Use tools like HashiCorp Vault, AWS Secrets Manager, or Doppler. Never hardcode keys.
4. **Compliance**: Guide development to meet regulatory requirements and maintain audit logs.

From nextappcode/Erica-AI, GPL-3.0.

Signals

Stars: 0
Forks: 0
Open issues: 0
Last commit (this folder): Jul 17, 2026 (3 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License: GPL-3.0
Repository: github.com/nextappcode/Erica-AI
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: GitHub github-graphql

More from nextappcode

Cite this page

security-engineer skill. Agent Mart. https://agentmart.dev/skills/nextappcode-security-engineer (last updated 2026-10-24)