// stryxstryx-security

Security.

Security hardening. Threat modeling. Encryption recipes. Dependency audits. OWASP compliance. The pre-ship gate.

Install this skill ↓ ← Back to all skills

//01What it does

CWE Top 25, STRIDE, Electron Hardening.

Security is checklist work AND threat modeling work. This skill covers both: STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) for systematic threat enumeration, CWE Top 25 for known vulnerability classes, Electron-specific hardening (contextIsolation, nodeIntegration, CSP), encryption envelope patterns, and dependency audit automation.

//02What is inside

Four recipes.

i.

STRIDE threat modeling

For each component: enumerate Spoofing, Tampering, Repudiation, Info Disclosure, DoS, Elevation. Score each (likelihood times impact). Mitigate the top quartile.

ii.

CWE Top 25 catalog

The 25 most common vulnerability classes (CWE-79 XSS, CWE-89 SQLi, CWE-352 CSRF, etc.). Each has a recognition pattern + the standard mitigation.

iii.

Electron hardening

contextIsolation: true ALWAYS. nodeIntegration: false ALWAYS. CSP locked down. Preload bridge typed + validated. safeStorage for credentials.

iv.

Encryption envelope

PBKDF2 to Store Key, encrypt DEK, encrypt data with DEK. Rotate DEK on password change. AES-256-GCM (authenticated). The Orion pattern.

//03Chains with

It composes.

Skills compose into workflows. Security is rarely the only skill you will use — it pairs naturally with these others in the library.

stryx-review→ stryx-test→ stryx-architect→

//04Install · just this skill

One command.

Installs only stryx-security (skip the other 19) into ~/.claude/skills/stryx-security/.

macOS · Linux

$ STRYX_SKILL=stryx-security curl -fsSL https://stryxlabs.com/install-skills.sh | bash

Windows · PowerShell

PS> $env:STRYX_SKILL="stryx-security"; irm https://stryxlabs.com/install-skills.ps1 | iex

All 20 skills (the full library)

$ curl -fsSL https://stryxlabs.com/install-skills.sh | bash

//05Reach

Free for all use.

Stryx Labs License v1.0. Use Security in personal, commercial, internal, and production work. No attribution required.

← See all 20 skills Read the license Email us