Навыков: 4 624. Сортировка по числу звёзд.
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Performs evidence-backed application and agentic-workflow security review. Use for auth, authorization, untrusted input,...
Audits provenance and instruction-supply-chain risk for external skills, MCP/tool descriptions, retrieved prompts, agent...
Designs high-value regression, property, integration, fuzz, and risk-based mutation tests for behavior changes. Use afte...
Run The Crucible (圆桌萃鉴), a rigorous evidence-backed multi-reviewer review. Configure a confirmed table, preserve separat...
Passive email, subdomain, and IP harvesting from public sources using theHarvester. Use when: gathering corporate email...
Embody Theo Von - AI persona expert with integrated methodology skills
Meta-/Umbrella-Skill für die Familie „Therapie / Beratung". Kennt alle therapeutischen Skills (Stabilisierung, Methoden-...
Use for combined correctness and code-quality reviews.
检查桌面应用、本地存储、更新与进程间信任边界
Use for authorized security testing of desktop thick clients including local storage, update channels, IPC, traffic, and...
Forces Claude to pause before picking an implementation approach and ask: "Is there a cleverer, cheaper way?" Triggers w...
For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and repor...
Third-party trust boundary analyzer: inventories every outbound HTTP/RPC call (fetch, axios, got, requests, curl, Invoke...
- Be precise about thor-util verbs:
This is the root skill. It routes requests to the right sub-skill and enforces a few global rules.
Monitors authorized threat intelligence feeds, attack patterns, and risk assessments to proactively identify emerging th...
Reviews specifications for UI-layer security risks including data spillage paths, implicit trust, and misconfiguration v...
Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry. Covers h...
Proactively search for security threats, vulnerabilities, and suspicious patterns in applications and infrastructure bef...
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, cre...
Perform STRIDE threat modeling on application architecture to identify spoofing, tampering, repudiation, info disclosure...
STRIDE threat modeling before implementing security-sensitive features. Use when: threat, STRIDE, attack surface, securi...
Use to conduct STRIDE threat modeling for a system or feature design.
STRIDE threat modelling — spoofing, tampering, repudiation, disclosure, DoS, EoP. Deep-dive for /launch-check security.
Routes an explicitly requested threat model or an existing scan's modeling phase to the original native threat-model ski...
Write a threat model document. Use when the user says "threat model", "threat modeling", "STRIDE analysis", "attack surf...
Produces a threat model — purpose, deployment, trusted inputs, untrusted inputs — for a new feature or component before...
Score how current an org's threat model is against 2026 reality — 14-item checklist, currency percentage, prioritized up...
Creates comprehensive STRIDE-based threat models from architecture descriptions, design documents, or code repositories....
STRIDE threat modeling and privacy impact assessment to generate security/privacy requirements. Use before requirement-a...
Produce AEOS threat models for prompt injection, tool poisoning, secret leakage and package tampering. Use when the user...
Audit, write, or revise a threat model using STRIDE. Use when asked what could go wrong with a system, to threat-model o...
Analyzing codebases to systematically identify and categorize potential security threats, producing a threat model repor...
Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when...
Identifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry points,...
Identify and analyze security threats. Use when designing systems, reviewing architecture, or assessing risk. Covers STR...
Use this skill when you need evidence-bounded threat-modeling analysis and validation preparation; triggers include 威胁建模...
Use when implementing auth, file uploads, payments, or external APIs. Applies STRIDE framework systematically. Triggers:...
Decide what a design must be true before code exists: naming assets and actors, locating trust boundaries, producing a w...
Every methodology — STRIDE, PASTA, LINDDUN, attack trees — is a technique for
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attac...
Build a mental and visual map of the target application before hunting — entry points, trust boundaries, data flows, and...
Routed by tia-openness-roadmap. Handles drive-specific engineering: Startdrive, SINAMICS, SIMATIC Drive Controller, PROF...
Embody Tig Notaro - AI persona expert with integrated methodology skills
Run a deep, adversarial multi-angle vulnerability hunt across TimerMeet (beyond the routine pre-release bandit/pip-audit...