Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

threat-model

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Exécuter dans Manus

Aperçu

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Commande d'installation

npx skills add https://github.com/rysweet/skwaq --skill threat-model

Copiez et collez cette commande dans Claude Code pour installer le skill

Source

rysweet/skwaq

Étoiles5

Forks3

Mis à jour11 mars 2026 à 01:26

SKILL.md

readonly

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats

Plus depuis ce dépôt

même dépôt

llm-binary-vuln-guide

rysweet/skwaq

Reference guide for LLM-based vulnerability detection in binary code. Provides best practices, techniques, and prompting strategies for using LLMs to find vulnerabilities in stripped binaries, firmware, and decompiled code. Use when analyzing binaries with AI, writing vulnerability analysis prompts, or optimizing detection pipelines.

2026-03-165

binary-audit

rysweet/skwaq

Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.

2026-03-115

compare-binaries

rysweet/skwaq

Compare two binaries for security differences. Use for patch analysis or regression testing.

2026-03-115

cwe-lookup

rysweet/skwaq

Look up CWE entries and explain their relevance. Use when discussing vulnerability types or CWE classifications.

2026-03-115

explain-vuln

rysweet/skwaq

Explain a specific vulnerability finding in detail with remediation guidance. Use when the user wants to understand a finding or how to fix it.

2026-03-115

source-audit

rysweet/skwaq

Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

2026-03-115

Source

rysweet

rysweet/skwaq

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Commande d'installation

Téléchargement

Exécuter dans Manus

Utile pourSOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques15-1212L4

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats