Skip to content
Back to skills

Architecture

ASecurity

Define and enforce Quality Attributes (Non-Functional Requirements)

  • 23 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 14, 2026
ai-agentsgorailssecurityperformance

Security analysis

A100/100

Pro scans all 21 files and shows the line behind each finding

Scanned October 14, 2026

npx -y skills add andreibesleaga/GABBE --skill architecture --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Architecture?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Architecture
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/andreibesleaga-architecture-6fb0bc03/badge)](https://www.skillsdirectory.com/skills/andreibesleaga-architecture-6fb0bc03)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: system-qualities
description: Define and enforce Quality Attributes (Non-Functional Requirements)
triggers: [define NFRs, analyze system qualities, set SLAs]
tags: [architecture]
context_cost: low
---
# system-qualities

## Goal
Elicit, define, and enforce system Quality Attributes (NFRs) such as performance, scalability, reliability, and security metrics.

## Steps
1. **Elicitation**: Parse the `PRD_TEMPLATE.md` to map business goals to technical NFRs.
2. **Definition**: Use the `QUALITY_ATTRIBUTES_TEMPLATE.md` to specify exact Service Level Indicators (SLIs) and Service Level Objectives (SLOs).
3. **Mapping**: Map these NFRs to architectural decisions (e.g., caching for latency, redundancy for availability).
4. **Verification**: Verify that the chosen architecture patterns theoretically support the required SLOs.

## Security & Guardrails

### 1. Skill Security
- **Metric Overwriting**: Prevent the agent from lowering defined SLOs (e.g., changing 99.9% to 99%) without human rationale and approval.
- **File Integrity**: Ensure the NFR definitions are strictly parsed as markdown tables/lists and do not execute external scripts.

### 2. System Integration Security
- **Security as an NFR**: Security and Compliance must always be defined as tier-1 NFRs. The agent cannot deprioritize them below Performance or Feature Velocity.
- **Audit Logging**: Data retention and immutability must be specified to comply with SOC2/GDPR compliance logging standards.

### 3. LLM & Agent Guardrails
- **Unrealistic Guarantees**: The LLM must not promise 100% availability or zero-latency for distributed networks (violating the CAP theorem).
- **Vague Metrics**: The agent must reject vaguely defined NFRs ("system must be fast") and mandate measurable SLIs ("p99 latency < 100ms").

Files in this skill

  • adaptive-architecture.skill.md3.7 KB
  • api-design.skill.md4.7 KB
  • api-standards.skill.md1.7 KB
  • arch-debt.skill.md8.2 KB
  • arch-design.skill.md12.6 KB
  • arch-patterns.skill.md3.9 KB
  • arch-review.skill.md14.1 KB
  • architecture-governance.skill.md3.6 KB
  • attribute-driven-design.skill.md7.5 KB
  • blockchain-dlt.skill.md1.9 KB
  • compatibility-design.skill.md3.6 KB
  • critical-systems-arch.skill.md2 KB
  • design-patterns.skill.md4.3 KB
  • diagramming.skill.md13.9 KB
  • domain-model.skill.md12.1 KB
  • enterprise-migration-scenario.skill.md2 KB
  • enterprise-patterns.skill.md1.9 KB
  • error-handling-strategy.skill.md3.9 KB
  • event-driven-architecture.skill.md1.8 KB
  • event-governance.skill.md3.4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.