Best threat modeling skills, page 5

Assess the physical attack surface of embedded devices — finding and using UART consoles, JTAG/SWD debug, and SPI/I2C flash; dumping firmware off-chip; triaging secure boot; and studying sub-GHz RF…

trilwu/secskills

Produce a repository-grounded application security threat model with assets, boundaries, abuse paths, priorities, and mitigations.

nightly-labs/openbot

Threat modeling and attack surface analysis. An agent skill from hashgraph-online/awesome-codex-plugins.

hashgraph-online/awesome-codex-plugins

Systematic vulnerability scan across injection, auth, data exposure, and dependencies — traced by reading code, not grepping for keywords.

hashgraph-online/awesome-codex-plugins

Security Ownership Map workflow skill. An agent skill from diegosouzapw/awesome-omni-skills.

diegosouzapw/awesome-omni-skills

Design and apply QA methodology for software teams: test strategy, regression testing, CI failure triage, test automation, quality gates and metrics, risk-based testing, exploratory testing, test…

magnus919/agent-skills

Vulnerability review, threat modeling, OWASP patterns, and secure coding assessment.

rsmdt/the-startup

AI-powered security analysis of code changes — traces data flow, detects injection, auth bypass, secrets exposure, and unsafe deserialization across files.

danielvm-git/bigpowers

Plans and runs authorized reconnaissance to enumerate a target's external attack surface (DNS, subdomains, ports, web tech) and produces a prioritized report.

criptogus/agent-evolve-network

Trigger Pattern Any external module interaction detected in attacksurface.md - Inject Into Breadth agents (merged via M5 hierarchy)

PlamenTSV/plamen

Generate a STRIDE-based security threat model for a repository.

Factory-AI/factory-plugins

Assess vulnerabilities and audit for security compliance using OWASP and STRIDE methodology — a user-invoked Security Auditor workflow.

dralgorhythm/claude-agentic-framework

A skill your agent uses when drafting an ACM CCS rebuttal during the HotCRP author-response window, covering threat-model defenses, adaptive-attack objections, ethics and disclosure questions…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when strengthening ACM CCS reproducibility evidence, including the artifact-availability posture, threat-model-to-evidence mapping, attack reproduction steps, defense…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when deciding whether a security project fits ACM CCS versus IEEE S&P, USENIX Security, NDSS, PETS, or a crypto/theory venue, identifying the security contribution type, and…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when revising an ACM CCS paper for a precise threat model, calibrated attack/defense claims, 12-page ACM sigconf compression, double-blind wording, adaptive-evaluation…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when drafting the IEEE S&P (Oakland) rebuttal for second-round papers or the response plan for a Revise decision, including triaging reviews under the ~5-day window…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when deciding whether a security or privacy project belongs at IEEE S&P (Oakland), including the threat-model test, SoK fit, routing among USENIX Security, CCS, NDSS, PETS…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when writing or revising an IEEE S&P (Oakland) paper's prose, including the threat-model-first structure, calibrating security claims to evaluated boundaries, the first-round…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when revising an ISSTA paper for a clear testing/analysis contribution, covering the threat-model-then-technique structure, the evaluation contract, a threats-to-validity…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses to rehearse peer review before submitting — a calibrated Associate Editor desk-screen plus 2–3 distinct-lens referees for the target venue, adversarially verified and…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when designing or auditing the evaluation of a USENIX Security Symposium paper — building threat-model-faithful experiments, adaptive-attacker analysis for defenses…

brycewang-stanford/Awesome-Journal-Skills

A skill your agent uses when drafting or revising prose for a USENIX Security Symposium paper — threat-model-first structure, calibrated security claims, disclosure narrative woven into the text…

brycewang-stanford/Awesome-Journal-Skills

Perform a broad, authorized security audit across application, infrastructure, identity, dependencies, and operations.

seb1n/awesome-ai-agent-skills

Conduct structured threat modeling for software systems using established methodologies to identify, prioritize, and mitigate security threats before they are exploited.

seb1n/awesome-ai-agent-skills

Risk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modeling, compliance frameworks, and enterprise risk assessment

majiayu000/claude-skill-registry

A skill your agent uses when analyzing, selecting, validating, or communicating models for insurance, actuarial, financial-risk, or other consequential uncertain outcomes.

magnus919/agent-skills

A skill your agent uses when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan.

CoWork-OS/CoWork-OS

Guidance for Microsoft Defender External Attack Surface Management (Defender EASM) — discovers and inventories an organization's internet-facing assets (domains, hosts, IPs, SSL certs, ASNs, web…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender for Endpoint (MDE) — enterprise endpoint security with next-gen AV, EDR, attack surface reduction (ASR), Defender Vulnerability Management, automated investigation…

vinayaklatthe/microsoft-security-skills

Guidance for threat modelling using STRIDE and the Microsoft Security Development Lifecycle (SDL).

vinayaklatthe/microsoft-security-skills

Complete guide to LINDDUN privacy threat modeling methodology covering seven threat categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and Non-compliance.

mukul975/Privacy-Data-Protection-Skills

MASTER SECURITY: OWASP Top 10, SAST/DAST, PenTest. An agent skill from Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI.

Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI

Advanced vulnerability analysis principles. An agent skill from Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI.

Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI

Expert knowledge for Azure External Attack Surface Management development including configuration.

MicrosoftDocs/Agent-Skills

Security design principles, STRIDE threat modeling, OWASP Top 10 architectural mitigations, and secure patterns.

nWave-ai/nWave