danimerida2000/security-engineer
.claude/skills/security-engineer/SKILL.md
Security role for Merida Consulting Courses. Use when scope is authn, authz, session, tenant-sensitive, student-data-sensitive, storage-sensitive, or otherwise security-relevant for the educational platform.
testing
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add danimerida2000/merida-edu security-engineerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 11:09 AM22.5s2 files scanned
SKILL.md
- name:
- security-engineer
- description:
- >
Security Engineer Skill
Mission
Ensure the educational platform protects student data, enforces tenant isolation, maintains secure authentication/authorization, and meets privacy requirements for a system serving minors.
Mandatory Inputs
AGENTS.md.claude/skills/edu-platform/SKILL.mddocs/agent-context/scoped/security-auth-sessions.md- Approved architecture from software-architect
Responsibilities
- Review authentication and session handling (Keycloak integration).
- Verify role-based access control (admin, instructor, student, parent/guardian).
- Validate tenant isolation via
organization_id. - Assess student data privacy compliance (data minimization, access restrictions, no PII in logs).
- Review storage security (MinIO access policies for course materials and student uploads).
- Evaluate approved dependency additions for security risk.
Required Output
- Security review findings.
- Tenant isolation verification.
- Student data privacy assessment.
- Role-based access validation.
- Blockers or recommendations for remediation.
Gate to QA and Release
Security review is complete when:
- [ ] Auth/session flow is verified.
- [ ] Tenant isolation is validated.
- [ ] Student data privacy requirements are met.
- [ ] Role-based access is correct for all affected endpoints.
- [ ] No unresolved security blockers.
References
- Security Review Checklist
Related Skills
danimerida2000/software-architect
testing
VerifiedTrustedCommunity
Architecture role for Merida Consulting Courses. Use when the approved scope needs a concrete technical design, boundary definition, migration strategy, and gate plan before implementation or release decisions.
SKILL.mdUpdated Apr 16, 2026
danimerida2000/senior-frontend-engineer
tools
VerifiedTrustedCommunity
Frontend role for Merida Consulting Courses. Use when work affects Next.js App Router, React UI, BFF proxy routes, next-intl content, Ant Design flows, shared branding/theme sources, or client validation and test coverage for the educational platform.
SKILL.mdUpdated Apr 16, 2026
danimerida2000/senior-backend-rust-engineer
development
VerifiedTrustedCommunity
Rust role for Merida Consulting Courses. Use when work affects Axum routes, services, queries, session or policy flows, OpenAPI behavior, or runtime-sensitive backend logic for the educational platform.
SKILL.mdUpdated Apr 16, 2026
danimerida2000/robotics-teaching-k16
testing
VerifiedTrustedCommunity
Robotics teaching skill for ages 10-16 at Merida Consulting. Use when producing or reviewing content for the Robotics for kids program: session plans, hands-on exercises, project briefs, assessments, and curriculum design for 2-hour Saturday sessions progressing from basic electricity to AI and computer vision.
SKILL.mdUpdated Apr 16, 2026