Skill UI

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

Functions as a Chief Security Architect assistant that performs STRIDE/PASTA threat modeling, OWASP checks, Red/Blue team simulations and incident response playbooks to harden any project before production.

This skill guides users through performing comprehensive threat modeling using the OWASP Threat Dragon tool. It covers creating Data Flow Diagrams (DFD), identifying vulnerabilities using established methodologies like STRIDE and LINDDUN, defining mitigations, and generating formal PDF reports. Ideal for secure design reviews, architecture validation, and achieving GRC compliance.

A comprehensive skill for performing deep security audits and writing secure code in Go. It guides developers through identifying vulnerabilities like SQL injection, XSS, path traversal, and crypto misuse. The framework incorporates advanced techniques such as STRIDE/DREAD threat modeling, data flow tracing, and multi-stage review modes (Audit, Review, Coding), ensuring defense in depth for robust Go applications.

Provides a comprehensive framework for secure software development, covering threat modeling (STRIDE), input validation, authentication, and authorization. Essential for handling user input, PII, and external integrations to prevent common vulnerabilities like XSS and SQL injection.

Conducts STRIDE-A threat modeling on repositories or systems, running either a full single-pass analysis with architectures, DFDs, prioritized findings, and executive assessments, or an incremental update that compares a baseline report to the current code and highlights deltas.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

This skill generates fully valid Microsoft Threat Modeling Tool (.tm7) files. It translates complex system architectures, including components, data stores, data flows, and external actors, into the required WCF DataContractSerializer XML format. Use it for structured STRIDE threat modeling outputs compatible with Microsoft's official tool.

This advanced skill performs server-enforced security and privacy reviews for applications, including those rapidly developed with AI agents. It implements comprehensive models like STRIDE (security) and LINDDUN (privacy), screens dependencies against live CVE/CISA data, and evaluates applicability of major EU regulations (GDPR, AI Act, NIS2). The output is a formal, auditable compliance report, never a simulated chat response or legal verdict.