Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

threat-model

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Ejecutar en Manus

Resumen

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Comando de instalación

npx skills add https://github.com/rysweet/skwaq --skill threat-model

Copia y pega este comando en Claude Code para instalar la habilidad

Fuente

rysweet/skwaq

Estrellas5

Forks3

Actualizado11 de marzo de 2026, 01:26

SKILL.md

readonly

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats

Más de este repositorio

mismo repositorio

llm-binary-vuln-guide

rysweet/skwaq

Reference guide for LLM-based vulnerability detection in binary code. Provides best practices, techniques, and prompting strategies for using LLMs to find vulnerabilities in stripped binaries, firmware, and decompiled code. Use when analyzing binaries with AI, writing vulnerability analysis prompts, or optimizing detection pipelines.

2026-03-165

binary-audit

rysweet/skwaq

Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.

2026-03-115

compare-binaries

rysweet/skwaq

Compare two binaries for security differences. Use for patch analysis or regression testing.

2026-03-115

cwe-lookup

rysweet/skwaq

Look up CWE entries and explain their relevance. Use when discussing vulnerability types or CWE classifications.

2026-03-115

explain-vuln

rysweet/skwaq

Explain a specific vulnerability finding in detail with remediation guidance. Use when the user wants to understand a finding or how to fix it.

2026-03-115

source-audit

rysweet/skwaq

Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

2026-03-115

Fuente

rysweet

rysweet/skwaq

Abrir repositorio de GitHub Ver repositorios del creador

Comando de instalación

Descarga

Ejecutar en Manus

Útil paraSOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas15-1212L4

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats