Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

Security Architecture Design Skill

Guides Claude in designing end-to-end security architectures using defense-in-depth, zero trust, STRIDE/PASTA threat modeling, and NIST CSF / CIS / ISO 27001 control mapping.

Security & ReviewAdvanced★ 525⑂ 76AI score 9/10Last updated: Dec 11, 2025

What it does

  • Designs 9-layer defense-in-depth coverage: physical, network perimeter, segmentation, endpoint, application, data, IAM, behavioral analytics, and security operations.
  • Provides Zero Trust principles, component reference architecture (policy engine, IdP, device posture, risk engine, enforcement points) and an adoption roadmap.
  • Runs threat modeling: a 5-step STRIDE process, comparison of PASTA/DREAD/attack trees, plus bundled example models for web apps, REST APIs and microservices.
  • Maps risks to control frameworks: NIST CSF 2.0 functions, CIS Controls v8 (IG1–IG3), ISO 27001, OWASP Top 10 → architectural controls.
  • Covers cloud patterns: AWS Organizations multi-account with SCP guardrails, GCP org hierarchy, Azure hub-spoke landing zone.
  • Addresses supply chain security: SLSA levels, SBOM generation (CycloneDX/SPDX), dependency scanning automation.

Who it's for

  • Architects designing security for greenfield systems or cloud migrations.
  • Security/compliance leads mapping controls for SOC 2, HIPAA, PCI DSS or ISO 27001.
  • Platform and infrastructure engineers planning zero trust rollouts or SIEM/SOAR programs.

Example uses

  1. "Build a STRIDE threat model for our new payments API and map each mitigation to NIST CSF categories."
  2. "Design an AWS multi-account security setup with a Security OU, logging account and SCP guardrails."
  3. "Give me a phased roadmap to replace VPN access with ZTNA, including required components."

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/ancoleman/ai-design-components/HEAD/skills/architecting-security/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the skills/architecting-security folder from the GitHub repo ancoleman/ai-design-components into my ~/.claude/skills/architecting-security/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/ancoleman/ai-design-components.git && mkdir -p ~/.claude/skills && cp -r ai-design-components/skills/architecting-security ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal.
  2. Clone the repository: git clone https://github.com/ancoleman/ai-design-components.git
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy the whole skill folder (references/, examples/ and scripts/ must come along): cp -r ai-design-components/skills/architecting-security ~/.claude/skills/
  5. Restart Claude Code, then try a prompt like "design a security architecture for this system" to confirm the skill loads.
  6. To use the helper scripts, make them executable: chmod +x ~/.claude/skills/architecting-security/scripts/*.sh
View source on GitHub ↗License: MIT