senior-security
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.
Third-Party Agent Skill: Review the code before installing. Agent skills execute in your AI assistant's environment and can access your files. Learn more about security
Installation for Agentic Skill
View all platforms →skilz install alirezarezvani/claude-skills/senior-securityskilz install alirezarezvani/claude-skills/senior-security --agent opencodeskilz install alirezarezvani/claude-skills/senior-security --agent codexskilz install alirezarezvani/claude-skills/senior-security --agent geminiFirst time? Install Skilz: pip install skilz
Works with 22+ AI coding assistants
Cursor, Aider, Copilot, Windsurf, Qwen, Kimi, and more...
Extract and copy to ~/.claude/skills/ then restart Claude Desktop
git clone https://github.com/alirezarezvani/claude-skillscp -r claude-skills/engineering-team/senior-security ~/.claude/skills/Need detailed installation help? Check our platform-specific guides:
Related Agentic Skills
automating-mail
by SpillwaveSolutions
Automates Apple Mail via JXA with AppleScript dictionary discovery. Use when asked to "automate email", "send mail via script", "JXA Mail automatio...
automating-reminders
by SpillwaveSolutions
Automates Apple Reminders using JavaScript for Automation (JXA). Use when asked to "create reminders programmatically", "automate reminder lists", ...
mastering-postgresql
by SpillwaveSolutions
PostgreSQL development for Python with full-text search (tsvector, tsquery, BM25 via pg_search), vector similarity (pgvector with HNSW/IVFFlat), JS...
automating-contacts
by SpillwaveSolutions
Automates macOS Contacts via JXA with AppleScript dictionary discovery. Use when asked to "automate contacts", "JXA contacts automation", "macOS ad...
Agentic Skill Details
- Owner
- alirezarezvani (GitHub)
- Repository
- claude-skills
- Stars
- 579
- Forks
- 112
- Type
- Other
- Meta-Domain
- Primary Domain
- Market Score
- 0
Agent Skill Grade
F Score: 40/100 Click to see breakdown
Score Breakdown
Areas to Improve
- Empty Reference Files
- Non-Functional Scripts
- Generic Tech Stack
Recommendations
- Focus on improving Pda (currently 8/30)
- Focus on improving Ease Of Use (currently 12/25)
- Focus on improving Writing Style (currently 4/10)
Graded: 2026-01-24
Developer Feedback
I was curious about the security-focused angle here, but the fundamentals seem to be missing some depth—let me walk through what I'm seeing at a 40/100 grade and where we could strengthen this.
Links:
The TL;DR
You're at 40/100, landing in F territory. This is based on Anthropic's best practices for agentic skills. Your strongest area is Spec Compliance (12/15)—the frontmatter and naming conventions are solid. The killer is Utility (4/20)—the skill promises a lot but doesn't deliver actual security functionality.
What's Working Well
- Clean metadata structure – Your YAML frontmatter is valid and the skill name follows hyphen-case conventions correctly
- Solid trigger phrases – The description nails discoverability with specific keywords: "penetration tests", "security audits", "cryptography implementation"
- Good spec alignment – You're following the skill format requirements properly; the problem is what's inside
The Big One: Empty Reference and Script Files
This is your main blocker. All three reference files (security_architecture_patterns.md, penetration_testing_guide.md, cryptography_implementation.md) are identical generic templates with placeholder text like "Pattern 1: Best Practice Implementation" and "Detailed explanation of the pattern." Same story with your Python scripts—they're all identical templates where analyze() just returns empty results.
You're promising "Complete toolkit for senior security" but delivering boilerplate. Replace those references with actual security patterns: OAuth 2.0 validation, STRIDE threat modeling, OWASP Top 10 mitigations, AES-256-GCM encryption, SQL injection prevention. The scripts should implement real security scan...
AI-Detected Topics
Extracted using NLP analysis
Report Security Issue
Found a security vulnerability in this agent skill?
Report Security Issue
Thank you for helping keep SkillzWave secure. We'll review your report and take appropriate action.
Note: For critical security issues that require immediate attention, please also email security@skillzwave.ai directly.