New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Multi Agentic Threat Model

by OWASP in OWASP/secure-agent-playbook

Comprehensive threat modeling for multi-agent systems using CSA MAESTRO 7-layer framework and OWASP Multi-Agentic System Threat Modeling Guide v1.0.

Custom licenceAuto-check: notesSecurity

Install Multi Agentic Threat Model

skills CLI
$ npx skills add OWASP/secure-agent-playbook --skill multi-agentic-threat-model -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install OWASP/secure-agent-playbook multi-agentic-threat-model --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/OWASP/secure-agent-playbook.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/multi-agentic-threat-model .claude/skills/multi-agentic-threat-model && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
multi-agentic-threat-model
GitHub stars
187
Token cost
~835 tokens
SKILL.md length
313 words
Files
1
Skills in repo
14
Repo updated
First seen
Licence
Custom licence

At a glance

Comprehensive threat modeling for multi-agent systems using CSA MAESTRO 7-layer framework and OWASP Multi-Agentic System Threat Modeling Guide v1.0.

  • Works in 6 steps: MAESTRO 7-Layer Architecture Mapping —… → Layer-Specific Threat Analysis —… → Cross-Layer Threat Assessment — Analyze… → …
  • Tasks that involve Threat modeling
  • SKILL.md covers Steps, Output and OWASP References
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Multi Agentic Threat Model is an agent skill from OWASP/secure-agent-playbook. Comprehensive threat modeling for multi-agent systems using CSA MAESTRO 7-layer framework and OWASP Multi-Agentic System Threat Modeling Guide v1.0. Systematically analyzes threats across all architectural layers from foundation models to agent ecosystems.

Its SKILL.md is about 840 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Threat modeling, Web application vulnerabilities and Mobile testing and debugging. The repository describes itself as: OWASP Secure Agent Playbook Project.

When your agent uses it

  • Tasks that involve Threat modeling
  • Tasks that involve Web application vulnerabilities
  • Tasks that involve Mobile testing and debugging

Example prompts

  • “/multi-agentic-threat-model”

Requirements

  • Pre-approved tools (allowed-tools): Read, Grep, Glob, Bash, WebFetch, Agent

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. MAESTRO 7-Layer Architecture Mapping — Decompose the system into CSA's layered reference architecture
  2. Layer-Specific Threat Analysis — Identify threats unique to each MAESTRO layer using CSA taxonomy.
  3. Cross-Layer Threat Assessment — Analyze attack chains that span multiple layers (supply chain attacks, lateral movement, privilege…
  4. Extended Multi-Agent Threats — Apply MAESTRO framework extensions for complex multi-agent scenarios
  5. Architecture Pattern Risk Assessment — Evaluate specific multi-agent patterns (supervisor-agent, hierarchical, distributed ecosystem…
  6. Mitigation Strategy Development — Design layer-specific, cross-layer, and AI-specific security controls.

What it can do on your machine

Read from SKILL.md and the folder at commit 1b5fd4c. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Glob
    • Bash
    • WebFetch
    • Agent

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Multi Agentic Threat Model loads about 835 tokens when it runs. Until then it costs about 71 tokens; SKILL.md has 313 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~71
When it runs · the whole SKILL.md, loaded when a task matches
~835

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Grep, Glob, Bash, WebFetch, Agent

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 313 words (~835 tokens).

“Conduct comprehensive threat modeling for multi-agent systems using the Cloud Security Alliance (CSA) MAESTRO framework's 7-layer architecture and OWASP Multi-Agentic System Threat Modeling Guide v1.0.”

— opening of SKILL.md by OWASP, Custom licence
name
multi-agentic-threat-model
allowed-tools
Read, Grep, Glob, Bash, WebFetch, Agent

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .claude/skills/multi-agentic-threat-model of OWASP/secure-agent-playbook.

Open the folder on GitHubat commit 1b5fd4c

Compare with similar skills

Multi Agentic Threat Model next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Multi Agentic Threat Model compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Multi Agentic Threat Model this skillOWASP/secure-agent-playbook187—~835Automated safety check: NotesCustom licence
Security And Hardeningpenpot/penpot61k6 repos~4.7kAutomated safety check: NotesMPL-2.0
Security Audit Scannerruvnet/ruflo74k2 repos~823Automated safety check: PassMIT
Security and Hardeningaddyosmani/agent-skills103k1 repos~4.4kAutomated safety check: NotesMIT
CybersecurityAgriciDaniel/claude-cybersecurity227—~11kAutomated safety check: WarnMIT
Securitygaragon/nanostack207—~3.7kAutomated safety check: NotesApache-2.0

Similar skills

  • Security And Hardening

    penpot/penpot

    Hardens code against vulnerabilities. An agent skill from penpot/penpot.

    61k GitHub starsUsed in 6 repos~4.7k tokens
    SecurityAuto-check: notes

  • Security Audit Scanner

    ruvnet/ruflo

    Runs claude-flow CLI security scans for input validation, path traversal, SQL injection, XSS, hardcoded secrets and known CVEs, and writes an audit report.

    74k GitHub starsUsed in 2 repos~823 tokens
    SecurityAuto-check passed

  • Security and Hardening

    addyosmani/agent-skills

    Applies a threat-model-first approach to web code that handles untrusted input, authentication, data storage, dependencies or personal data.

    103k GitHub starsUsed in 1 repo~4.4k tokens
    SecurityAuto-check: notes

  • Cybersecurity

    AgriciDaniel/claude-cybersecurity

    Ultimate AI-powered cybersecurity code review skill. An agent skill from AgriciDaniel/claude-cybersecurity.

    227 GitHub stars~11k tokensUpdated 5 mo ago
    SecurityAuto-check: warnings

  • Security

    garagon/nanostack

    Use before shipping to production. An agent skill from garagon/nanostack.

    207 GitHub stars~3.7k tokensUpdated 28 days ago
    SecurityAuto-check: notes

  • Vulnerability Scanner

    xenitV1/Antigravity-Workflows

    Advanced vulnerability analysis principles. An agent skill from xenitV1/Antigravity-Workflows.

    130 GitHub starsUsed in 7 repos~1.8k tokens
    SecurityAuto-check: notes

More from OWASP/secure-agent-playbook

All 14 skills in this repo

  • Prd Securability Enhancement

    OWASP/secure-agent-playbook

    Enhance PRDs, feature specs, user stories, or product briefs with explicit OWASP ASVS coverage and FIASSE v1.0.4 SSEM implementation guidance — before code is written.

    187 GitHub stars~4.6k tokensUpdated 12 days ago
    Auto-check passed

  • Securability Engineering Review

    OWASP/secure-agent-playbook

    Score a codebase, file, or merge request against the FIASSE v1.0.4 SSEM model — 0-10 per attribute, equal-weighted pillars, evidence-backed strengths and weaknesses, prioritized recommendations…

    187 GitHub stars~4.6k tokensUpdated 12 days ago
    Auto-check passed

  • Securability Engineering

    OWASP/secure-agent-playbook

    Generate, scaffold, or refactor code so it embodies FIASSE v1.0.4 SSEM qualities by default — 10 attributes, Transparency and Least-Astonishment principles, ASVS-aligned controls, defensive boundary…

    187 GitHub stars~5.8k tokensUpdated 12 days ago
    Auto-check passed

  • Agent Security Audit

    OWASP/secure-agent-playbook

    Audit AI agent configurations for security risks — excessive permissions, prompt injection surfaces, data exfiltration paths, and missing guardrails.

    187 GitHub stars~542 tokensUpdated 12 days ago
    Auto-check passed

  • AI Security Verification

    OWASP/secure-agent-playbook

    Comprehensive AI security verification using OWASP AI Security Verification Standard (AISVS) framework.

    187 GitHub stars~876 tokensUpdated 12 days ago
    Auto-check passed

  • API Security Review

    OWASP/secure-agent-playbook

    Comprehensive API security review against OWASP API Security Top 10 (2023).

    187 GitHub stars~744 tokensUpdated 12 days ago
    Auto-check passed

Categories

Questions about Multi Agentic Threat Model

What does Multi Agentic Threat Model do?

Comprehensive threat modeling for multi-agent systems using CSA MAESTRO 7-layer framework and OWASP Multi-Agentic System Threat Modeling Guide v1.0. Multi Agentic Threat Model is an agent skill from OWASP/secure-agent-playbook.0.

When should I use Multi Agentic Threat Model?

Multi Agentic Threat Model fits situations like: tasks that involve Threat modeling; tasks that involve Web application vulnerabilities; tasks that involve Mobile testing and debugging.

How do I install Multi Agentic Threat Model in Claude Code?

Run `npx skills add OWASP/secure-agent-playbook --skill multi-agentic-threat-model -a claude-code`. Or copy the skill folder (.claude/skills/multi-agentic-threat-model in OWASP/secure-agent-playbook) into .claude/skills/multi-agentic-threat-model in your project. Claude Code loads it when a task matches its description.

How do I install Multi Agentic Threat Model in Codex?

Run `npx skills add OWASP/secure-agent-playbook --skill multi-agentic-threat-model -a codex`. Or copy the skill folder (.claude/skills/multi-agentic-threat-model in OWASP/secure-agent-playbook) into .agents/skills/multi-agentic-threat-model in your project. Codex loads it when a task matches its description.

Can I use Multi Agentic Threat Model in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add OWASP/secure-agent-playbook --skill multi-agentic-threat-model -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/multi-agentic-threat-model, .gemini/skills/multi-agentic-threat-model, .github/skills/multi-agentic-threat-model and .opencode/skills/multi-agentic-threat-model in your project.

What does Multi Agentic Threat Model need to run?

SKILL.md names no scripts, command-line tools or credentials: Multi Agentic Threat Model is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Grep, Glob, Bash, WebFetch, Agent.

Does Multi Agentic Threat Model access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Multi Agentic Threat Model safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Multi Agentic Threat Model use?

Multi Agentic Threat Model has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Multi Agentic Threat Model use?

About 835 tokens (SKILL.md is roughly 3.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Multi Agentic Threat Model?

Skills that share tags, products or a category with Multi Agentic Threat Model: Security And Hardening (penpot/penpot, 61k stars), Security Audit Scanner (ruvnet/ruflo, 74k stars), Security and Hardening (addyosmani/agent-skills, 103k stars) and Cybersecurity (AgriciDaniel/claude-cybersecurity, 227 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Multi Agentic Threat Model?

OWASP (a GitHub organization) maintains it in OWASP/secure-agent-playbook, which has 187 GitHub stars. The repository holds 14 skills in this directory. The repository was last updated on September 25, 2026.

Source: OWASP/secure-agent-playbook on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.