Skill UI

This skill generates fully valid Microsoft Threat Modeling Tool (.tm7) files. It translates complex system architectures, including components, data stores, data flows, and external actors, into the required WCF DataContractSerializer XML format. Use it for structured STRIDE threat modeling outputs compatible with Microsoft's official tool.

Techniques for hunting ASP.NET-specific attack surfaces, including ViewState deserialization, Telerik, WCF, and SharePoint. Requires explicit authorization and mandates a confirmation gate before any probing.