Skill UI

This comprehensive guide details security-first development practices, emphasizing threat modeling (STRIDE) and secure design principles. It provides mandatory controls for validating all external input, preventing common vulnerabilities like XSS and SQL injection, and properly managing authentication and sensitive data storage. Use it when building any feature that handles untrusted data or interacts with external systems.

Conducts STRIDE-A threat modeling on repositories or systems, running either a full single-pass analysis with architectures, DFDs, prioritized findings, and executive assessments, or an incremental update that compares a baseline report to the current code and highlights deltas.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.

The Founder-Mode Executive Team simulates a complete C-suite of 13 specialized agents (CFO, CMO, CPO, etc.) and provides 21 structured slash commands. It is designed for founders and executives who need multi-perspective analysis, deep strategic reviews (e.g., unit economics, threat modeling), consensus building, and structured decision logging. Use it when orchestrating complex, multi-phase business decisions.

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

This guide demonstrates how to use the pycti Python client to model complex cyber threat intelligence within the OpenCTI platform. It structures threat actors, intrusion sets, campaigns, and TTPs into a unified STIX 2.1 knowledge graph. The skill is essential for correlating fragmented data from multiple sources (IOCs, reports) into a comprehensive, queryable adversary picture, supporting advanced threat hunting and detection engineering.