domains / families / security / senior-security
Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing. Includes STRIDE analysis, OWASP guidance, cryptography patterns, and security scanning tools. Use when the user asks about security reviews, threat analysis, vulnerability assessments, secure coding practices, security audits, attack surface analysis, CVE remediation, or security best practices. Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.
The two copies describe the same high-level domain but provide materially different procedures. The benchflow-ai copy is a wrapper around three specific Python scripts (threat_modeler.py, security_auditor.py, pentest_automator.py) and references a specific tech stack (TypeScript, React, etc.). The LeoYeAI copy provides a manual, methodology-driven workflow (STRIDE, DREAD, Defense-in-Depth) with specific tables for threat categorization and authentication patterns. Neither is a reproduction of the other; one is tool-centric and the other is process-centric.