Fla Ascend Performance
fla-org/flash-linear-attention
Guidelines for Ascend NPU kernel / Triton-Ascend backend performance work in the FLA repo.
STRIDE, DREAD, Attack Tree 등 위협 모델링 방법론과 위협 식별·평가·대응 전략 수립 가이드.
Install Threat Modeling
$ npx skills add revfactory/harness-100 --skill threat-modeling -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install revfactory/harness-100 threat-modeling --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/revfactory/harness-100.git skills-src && mkdir -p .claude/skills && cp -r skills-src/ko/28-security-audit/.claude/skills/threat-modeling .claude/skills/threat-modeling && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "threat-modeling" agent skill from https://github.com/revfactory/harness-100/tree/main/ko/28-security-audit/.claude/skills/threat-modeling into .claude/skills/threat-modeling/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "threat-modeling", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/revfactory/harness-100/tree/main/ko/28-security-audit/.claude/skills/threat-modelingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add revfactory/harness-100 --skill threat-modeling -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install revfactory/harness-100 threat-modeling --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/revfactory/harness-100.git skills-src && mkdir -p .agents/skills && cp -r skills-src/ko/28-security-audit/.claude/skills/threat-modeling .agents/skills/threat-modeling && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "threat-modeling" agent skill from https://github.com/revfactory/harness-100/tree/main/ko/28-security-audit/.claude/skills/threat-modeling into .agents/skills/threat-modeling/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "threat-modeling", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add revfactory/harness-100 --skill threat-modeling -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install revfactory/harness-100 threat-modeling --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/revfactory/harness-100.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/ko/28-security-audit/.claude/skills/threat-modeling .cursor/skills/threat-modeling && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "threat-modeling" agent skill from https://github.com/revfactory/harness-100/tree/main/ko/28-security-audit/.claude/skills/threat-modeling into .cursor/skills/threat-modeling/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "threat-modeling", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/revfactory/harness-100.git --path ko/28-security-audit/.claude/skills/threat-modeling--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add revfactory/harness-100 --skill threat-modeling -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install revfactory/harness-100 threat-modeling --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/revfactory/harness-100.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/ko/28-security-audit/.claude/skills/threat-modeling .gemini/skills/threat-modeling && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "threat-modeling" agent skill from https://github.com/revfactory/harness-100/tree/main/ko/28-security-audit/.claude/skills/threat-modeling into .gemini/skills/threat-modeling/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "threat-modeling", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install revfactory/harness-100 threat-modelingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add revfactory/harness-100 --skill threat-modeling -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/revfactory/harness-100.git skills-src && mkdir -p .github/skills && cp -r skills-src/ko/28-security-audit/.claude/skills/threat-modeling .github/skills/threat-modeling && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "threat-modeling" agent skill from https://github.com/revfactory/harness-100/tree/main/ko/28-security-audit/.claude/skills/threat-modeling into .github/skills/threat-modeling/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "threat-modeling", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add revfactory/harness-100 --skill threat-modeling -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install revfactory/harness-100 threat-modeling --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/revfactory/harness-100.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/ko/28-security-audit/.claude/skills/threat-modeling .opencode/skills/threat-modeling && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "threat-modeling" agent skill from https://github.com/revfactory/harness-100/tree/main/ko/28-security-audit/.claude/skills/threat-modeling into .opencode/skills/threat-modeling/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "threat-modeling", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
threat-modeling- GitHub stars
- 1.3k
- Token cost
- ~835 tokens
- SKILL.md length
- 156 words
- Files
- 1
- Skills in repo
- 464
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
STRIDE, DREAD, Attack Tree 등 위협 모델링 방법론과 위협 식별·평가·대응 전략 수립 가이드.
- Works in 2 steps: 시스템 분해 (DFD 작성) → 요소별 STRIDE 분석
- Tasks that involve Threat modeling
- SKILL.md covers STRIDE 위협 분류, STRIDE 적용 절차, DREAD 위험 평가 and Attack Tree, plus 2 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Threat Modeling is an agent skill from revfactory/harness-100. STRIDE, DREAD, Attack Tree 등 위협 모델링 방법론과 위협 식별·평가·대응 전략 수립 가이드. 'STRIDE', 'DREAD', '위협 모델링', 'threat modeling', '공격 트리', 'attack surface', '위협 식별', '보안 설계' 등 시스템 위협 분석 시 이 스킬을 사용한다. security-consultant와 pentest-reporter의 위협 분석 역량을 강화한다. 단, 실제 침투 테스트 실행이나 CVE 스캐닝은 이 스킬의 범위가 아니다.
Its SKILL.md is about 840 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security, covering Threat modeling. The licence is Apache-2.0.
When your agent uses it
- Tasks that involve Threat modeling
Example prompts
- “STRIDE”
- “threat modeling”
- “attack surface”
- “/threat-modeling”
Workflow steps
2 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 8e8d35c. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Threat Modeling loads about 835 tokens when it runs. Until then it costs about 74 tokens; SKILL.md has 156 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from revfactory/harness-100 at commit 8e8d35c, republished under its Apache-2.0 licence (© revfactory). 156 words, ~835 tokens.
Download SKILL.mdSave it as
.claude/skills/threat-modeling/SKILL.md (or your agent's skills folder).- name
- threat-modeling
- description
- STRIDE, DREAD, Attack Tree 등 위협 모델링 방법론과 위협 식별·평가·대응 전략 수립 가이드. 'STRIDE', 'DREAD', '위협 모델링', 'threat modeling', '공격 트리', 'attack surface', '위협 식별', '보안 설계' 등 시스템 위협 분석 시 이 스킬을 사용한다. security-consultant와 pentest-reporter의 위협 분석 역량을 강화한다. 단, 실제 침투 테스트 실행이나 CVE 스캐닝은 이 스킬의 범위가 아니다.
Threat Modeling — 위협 모델링 방법론 가이드
시스템의 보안 위협을 체계적으로 식별하고 평가하는 프레임워크.
STRIDE 위협 분류
| 위협 | 설명 | 보안 속성 | 대응 패턴 |
|---|---|---|---|
| Spoofing | 신원 위장 | 인증 | MFA, 인증서 |
| Tampering | 데이터 변조 | 무결성 | HMAC, 디지털 서명, 체크섬 |
| Repudiation | 행위 부인 | 부인 방지 | 감사 로그, 타임스탬프 |
| Information Disclosure | 정보 누출 | 기밀성 | 암호화, 접근 제어 |
| Denial of Service | 서비스 거부 | 가용성 | Rate Limiting, 오토스케일링 |
| Elevation of Privilege | 권한 상승 | 인가 | RBAC, 최소 권한 원칙 |
STRIDE 적용 절차
Step 1: 시스템 분해 (DFD 작성)
┌────────┐ HTTPS ┌──────────┐ SQL ┌─────────┐
│ Browser │ ──────────→ │ Web App │ ────────→ │ DB │
│(외부) │ ←────────── │(Trust │ ←──────── │(Trust │
└────────┘ │ Boundary)│ │Boundary)│
└────┬─────┘ └─────────┘
│ REST API
▼
┌──────────┐
│ 외부 PG │
│(외부) │
└──────────┘
Trust Boundary(신뢰 경계)에서 위협이 발생한다.Step 2: 요소별 STRIDE 분석
## Browser → Web App (HTTPS)
| 위협 | 시나리오 | 위험도 | 대응 |
|------|---------|--------|------|
| S | 세션 하이재킹 | 높음 | HttpOnly, Secure 쿠키 |
| T | 중간자 공격 | 높음 | TLS 1.3, HSTS |
| R | 익명 요청 | 중간 | 요청 로깅, 인증 필수 |
| I | 전송 중 도청 | 높음 | TLS |
| D | DDoS | 높음 | WAF, Rate Limiting |
| E | 관리자 API 접근 | 높음 | 역할 기반 접근 제어 |DREAD 위험 평가
각 항목 1~10점 평가:
D (Damage): 피해 규모
R (Reproducibility): 재현 용이성
E (Exploitability): 공격 용이성
A (Affected Users): 영향 사용자 비율
D (Discoverability): 발견 용이성
위험도 = (D + R + E + A + D) / 5
등급:
├── 8~10: Critical (즉시 대응)
├── 5~7: High (계획된 수정)
├── 3~4: Medium (모니터링)
└── 1~2: Low (수용)예시 평가
위협: SQL Injection in Login API
├── Damage: 9 (전체 DB 탈취 가능)
├── Reproducibility: 8 (자동화 도구 존재)
├── Exploitability: 7 (공개 PoC 다수)
├── Affected Users: 10 (전체 사용자)
├── Discoverability: 9 (자동 스캐너로 발견)
└── 위험도: (9+8+7+10+9)/5 = 8.6 → CriticalAttack Tree
목표: 관리자 권한 획득
├── OR: 인증 우회
│ ├── AND: SQL Injection + 약한 비밀번호 해시
│ ├── 세션 하이재킹
│ │ ├── OR: XSS로 쿠키 탈취
│ │ └── OR: 네트워크 스니핑 (HTTP)
│ └── 디폴트 관리자 계정
├── OR: 권한 상승
│ ├── IDOR (관리자 API 직접 호출)
│ ├── JWT 변조 (role 필드)
│ └── API Gateway 우회
└── OR: 사회공학
├── 관리자 피싱
└── 내부자 공모공격 표면 분석
웹 애플리케이션 공격 표면
| 표면 | 요소 | 점검 항목 |
|---|---|---|
| 외부 API | REST/GraphQL 엔드포인트 | 인증, 인가, 입력 검증 |
| 인증 | 로그인, 토큰, 세션 | 브루트포스, 세션 관리 |
| 파일 업로드 | 프로필, 첨부파일 | 파일 유형 검증, 경로 조작 |
| 제3자 연동 | OAuth, Webhook, API | SSRF, 토큰 노출 |
| 관리 인터페이스 | Admin 패널, API | 접근 제어, 망 분리 |
| 데이터 저장 | DB, 캐시, 로그 | 암호화, 접근 제어 |
위협 모델링 보고서 템플릿
# 위협 모델링 보고서
## 시스템 개요
- 아키텍처 다이어그램 (DFD)
- 신뢰 경계 식별
## 위협 목록
| ID | STRIDE | 위협 시나리오 | DREAD 점수 | 현재 대응 | 잔여 위험 |
|----|--------|-------------|-----------|----------|----------|
| T1 | S | 세션 하이재킹 | 7.2 | HttpOnly 쿠키 | 중간 |
| T2 | I | SQL Injection | 8.6 | 파라미터화 쿼리 | 낮음 |
## 공격 표면 요약
## 우선순위별 대응 계획
## 잔여 위험 수용 목록© revfactory, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in ko/28-security-audit/.claude/skills/threat-modeling of revfactory/harness-100.
Open the folder on GitHubat commit 8e8d35c
Compare with similar skills
Threat Modeling next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Threat Modeling this skillrevfactory/harness-100 | 1.3k | — | ~835 | Automated safety check: Pass | Apache-2.0 | |
| Fla Ascend Performancefla-org/flash-linear-attention | 5.8k | — | ~6.3k | Automated safety check: Pass | MIT | |
| Forensifyalexgreensh/repo-forensics | 188 | — | ~2.5k | Automated safety check: Notes | Custom licence | |
| Create Rulecartography-cncf/cartography | 4.1k | — | ~3k | Automated safety check: Pass | Apache-2.0 | |
| Commit Security Scancodexstar69/bug-hunter | 519 | — | ~629 | Automated safety check: Pass | MIT | |
| Auditing Code For Vulnerabilitiestrilwu/secskills | 157 | — | ~3.2k | Automated safety check: Pass | MIT |
Similar skills
Forensify
alexgreensh/repo-forensics
Cross-agent self-inspection of your AI-agent stack. An agent skill from alexgreensh/repo-forensics.
Create Rule
cartography-cncf/cartography
Author a Cartography security rule (one or more Cypher Facts plus a Pydantic Finding output model) under cartography/rules/data/rules/.
Commit Security Scan
codexstar69/bug-hunter
Scan code changes for security vulnerabilities using Bug Hunter-native artifacts and STRIDE context.
Auditing Code For Vulnerabilities
trilwu/secskills
Audit source code for exploitable vulnerabilities using threat-model-driven review, taint tracing, invariant checking, and variant analysis.
Threat Mitigation Mapping
wshobson/agents
Match identified threats to preventive, detective and corrective controls across network, application, data, endpoint and process layers to plan remediation.
More from revfactory/harness-100
All 464 skills in this repoAnti Bot Analyzer
revfactory/harness-100
A skill for analyzing website anti-bot defense mechanisms and developing legitimate evasion strategies.
API Error Design Patterns
revfactory/harness-100
Reference for designing how an API reports failures: structured error codes, response shapes, client-friendly messages, an error catalog and retry or fallback advice.
API Security Checklist
revfactory/harness-100
Walks a backend-dev agent through OWASP API Top 10 checks, authentication and authorization patterns, and defense code during API design.
Arg Parser Generator
revfactory/harness-100
Methodology for systematically designing and generating CLI tool argument parser structures.
Audience Segmentation
revfactory/harness-100
Audience segmentation skill used by the analyst and curator agents.
Audio Storytelling
revfactory/harness-100
Audio storytelling skill used by the podcast scriptwriter and show note editor.
Related
Categories
Questions about Threat Modeling
What does Threat Modeling do?
STRIDE, DREAD, Attack Tree 등 위협 모델링 방법론과 위협 식별·평가·대응 전략 수립 가이드. Threat Modeling is an agent skill from revfactory/harness-100. STRIDE, DREAD, Attack Tree 등 위협 모델링 방법론과 위협 식별·평가·대응 전략 수립 가이드.
When should I use Threat Modeling?
Threat Modeling fits situations like: tasks that involve Threat modeling.
How do I install Threat Modeling in Claude Code?
Run `npx skills add revfactory/harness-100 --skill threat-modeling -a claude-code`. Or copy the skill folder (ko/28-security-audit/.claude/skills/threat-modeling in revfactory/harness-100) into .claude/skills/threat-modeling in your project. Claude Code loads it when a task matches its description.
How do I install Threat Modeling in Codex?
Run `npx skills add revfactory/harness-100 --skill threat-modeling -a codex`. Or copy the skill folder (ko/28-security-audit/.claude/skills/threat-modeling in revfactory/harness-100) into .agents/skills/threat-modeling in your project. Codex loads it when a task matches its description.
Can I use Threat Modeling in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add revfactory/harness-100 --skill threat-modeling -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/threat-modeling, .gemini/skills/threat-modeling, .github/skills/threat-modeling and .opencode/skills/threat-modeling in your project.
What does Threat Modeling need to run?
SKILL.md names no scripts, command-line tools or credentials: Threat Modeling is instructions for the agent only.
Does Threat Modeling access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Threat Modeling safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Threat Modeling use?
Threat Modeling is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Threat Modeling use?
About 835 tokens (SKILL.md is roughly 3.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Threat Modeling?
Skills that share tags, products or a category with Threat Modeling: Fla Ascend Performance (fla-org/flash-linear-attention, 5.8k stars), Forensify (alexgreensh/repo-forensics, 188 stars), Create Rule (cartography-cncf/cartography, 4.1k stars) and Commit Security Scan (codexstar69/bug-hunter, 519 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Threat Modeling?
revfactory (a GitHub user) maintains it in revfactory/harness-100, which has 1,295 GitHub stars. The repository holds 464 skills in this directory. The repository was last updated on March 22, 2026.
Source: revfactory/harness-100 on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.