Skill UI

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

This skill enables comprehensive software supply chain security assessment, covering SBOM generation, SCA scanning, CI/CD pipeline review, and container image auditing. It involves verifying build integrity, dependency provenance, and vulnerability reachability. Key activities include auditing upstream repositories, integrating security gates in CI/CD, ensuring artifact integrity, and monitoring CVEs for actual exploitability to mitigate supply chain attacks.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

This skill provides a framework for auditing Web3 smart contracts for security vulnerabilities. It includes pre-audit risk assessment strategies, critical bug class identification (like accounting desynchronization and access control), and Solidity code analysis techniques. Designed for authorized security assessments and educational purposes, it helps identify high-value targets and common exploit patterns in blockchain protocols.

A specialized tool for auditing WordPress plugins, themes, and blocks before deployment. It checks for security vulnerabilities like SQL injection, XSS, and improper escaping, ensures API correctness, and enforces internationalization standards. Use it to review generated code or perform security assessments on WordPress environments.