Skill UI

This skill guides users through performing comprehensive threat modeling using the OWASP Threat Dragon tool. It covers creating Data Flow Diagrams (DFD), identifying vulnerabilities using established methodologies like STRIDE and LINDDUN, defining mitigations, and generating formal PDF reports. Ideal for secure design reviews, architecture validation, and achieving GRC compliance.

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

A rigorous guide for drafting high-stakes, technical security papers for the USENIX Security Symposium. It mandates a threat-model-first structure, requiring authors to quantify all security claims with measurable data to avoid hyperbole. The guide also details integrating responsible disclosure narratives and adhering to strict academic formatting rules.