18 skills found
Synthesizes trust boundaries, attack surfaces, and attacker profiles into a living threat model. Use as Stage B of the Knowledge Base generation process, reading architecture and entity definitions from the KB. Don't use for analyzing source code or extracting raw learnings from JSONL files.
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
Threat modeling methodologies using STRIDE, attack trees, and risk assessment for proactive security analysis. Use when designing secure systems, conducting security reviews, or identifying potential attack vectors in applications.
Attack Surface Analyzer - Auto-activating skill for Security Advanced.Triggers on: attack surface analyzer, attack surface analyzerPart of the Security Advanced skill category.
Security Policy Generator - Auto-activating skill for Security Advanced.Triggers on: security policy generator, security policy generatorPart of the Security Advanced skill category.
Certificate Lifecycle Manager - Auto-activating skill for Security Advanced.Triggers on: certificate lifecycle manager, certificate lifecycle managerPart of the Security Advanced skill category.
Log Analysis Security - Auto-activating skill for Security Advanced.Triggers on: log analysis security, log analysis securityPart of the Security Advanced skill category.
Network Security Scanner - Auto-activating skill for Security Advanced.Triggers on: network security scanner, network security scannerPart of the Security Advanced skill category.
Penetration Test Planner - Auto-activating skill for Security Advanced.Triggers on: penetration test planner, penetration test plannerPart of the Security Advanced skill category.
Gdpr Compliance Scanner - Auto-activating skill for Security Advanced.Triggers on: gdpr compliance scanner, gdpr compliance scannerPart of the Security Advanced skill category.
Kubernetes Rbac Analyzer - Auto-activating skill for Security Advanced.Triggers on: kubernetes rbac analyzer, kubernetes rbac analyzerPart of the Security Advanced skill category.
