Skip to content

Search skills.../

Agent Skill Search Engine

Search

Search
Categories
Occupations

About

About
Privacy
Terms

© 2026 Skills Pool. All rights reserved.

Architecture And Security | Skills Pool

Skill File

Architecture And Security

Protect system invariants and run threat analysis before changes.

zerAda0 starsMar 20, 2026

Occupation: Information Security Analysts
Categories: Finance & Investment

Skill Content

Architecture Guardian + Threat Analysis

System invariants (must remain true)

/v1/* public contract remains stable (backward compatible)
n8n is not a public API surface; the gateway is the entrypoint
Console is private: BasicAuth + IP allowlist (never exposed by mistake)
CMS and Admin Dashboard are private: IP allowlist + optional BasicAuth
Inbound endpoints enforce auth before proxying/processing
Query-token auth is OFF by default
Inbound processing is idempotent (dedupe keys)
DB changes are safe + idempotent with backup/restore drills
Queue-mode in prod with explicit worker concurrency
All images SHA-pinned in CI (supply-chain security)

STRIDE threat model scope

Public API: api.srv1258231.hstgr.cloud/v1/*
Private console: console.srv1258231.hstgr.cloud

Related Skills

Quick Install

Architecture And Security

npx skillvault add zerAda/zerada-restaurantagentautomation-claude-skills-02-architecture-and-security-skill-md

Download Skill Open repository

Author: zerAda
stars: 0
Updated: Mar 20, 2026
Occupation

On this page

01Architecture Guardian + Threat Analysis

Private CMS: cms.srv1258231.hstgr.cloud

Private admin: admin.srv1258231.hstgr.cloud

Public kiosk: kiosk.srv1258231.hstgr.cloud

Proxy chain: Traefik -> Nginx gateway -> upstreams

n8n execution + workflow imports

Redis queue + Postgres data

Strapi content API

Review gate questions (answer explicitly)

Which invariant could this change weaken?
How does auth work end-to-end for this change?
What is the rollback plan?
What is the minimal proof (smoke test) that it is safe?
Does this change affect any trust boundary crossing?

Key files to check

project/docker-compose.hostinger.prod.yml (Traefik labels, middleware chains)
project/infra/gateway/nginx.conf (API routes, auth enforcement)
project/.env (feature flags, auth config)
project/secrets/ (credential files)

Required output

Invariant impact assessment (pass/fail per invariant)
STRIDE threat table (if security-relevant change)
Safer alternative if any invariant is at risk
Controls evidence map (files/configs proving controls)

02

System invariants (must remain true)

03STRIDE threat model scope

04Review gate questions (answer explicitly)

05Key files to check

06Required output

Finance & Investment

Llm Trading Agent Security

Security patterns for autonomous trading agents with wallet or transaction authority. Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling.

Finance & Investment

Energy Procurement

Codified expertise for electricity and gas procurement, tariff optimization, demand charge management, renewable PPA evaluation, and multi-facility energy cost management. Informed by energy procurement managers with 15+ years experience at large commercial and industrial consumers. Includes market structure analysis, hedging strategies, load profiling, and sustainability reporting frameworks. Use when procuring energy, optimizing tariffs, managing demand charges, evaluating PPAs, or developing energy strategies.

Finance & Investment

Council

Convene a four-voice council for ambiguous decisions, tradeoffs, and go/no-go calls. Use when multiple valid paths exist and you need structured disagreement before choosing.

Finance & Investment

Carrier Relationship Management

Codified expertise for managing carrier portfolios, negotiating freight rates, tracking carrier performance, allocating freight, and maintaining strategic carrier relationships. Informed by transportation managers with 15+ years experience. Includes scorecarding frameworks, RFP processes, market intelligence, and compliance vetting. Use when managing carriers, negotiating rates, evaluating carrier performance, or building freight strategies.

Finance & Investment

Market Research

Conduct market research, competitive analysis, investor due diligence, and industry intelligence with source attribution and decision-oriented summaries. Use when the user wants market sizing, competitor comparisons, fund research, technology scans, or research that informs business decisions.

Finance & Investment

Market Research

Conduct market research, competitive analysis, investor due diligence, and industry intelligence with source attribution and decision-oriented summaries. Use when the user wants market sizing, competitor comparisons, fund research, technology scans, or research that informs business decisions.

Information Security Analysts