Execute qualquer Skill no Manus
com um clique

Execute qualquer Skill no Manus com um clique

threat-model

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Executar no Manus

Visão geral

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Comando de instalação

npx skills add https://github.com/rysweet/skwaq --skill threat-model

Copie e cole este comando no Claude Code para instalar a skill

Fonte

rysweet/skwaq

Estrelas5

Forks3

Atualizado11 de março de 2026 às 01:26

SKILL.md

readonly

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats

Mais deste repositório

mesmo repositório

llm-binary-vuln-guide

rysweet/skwaq

Reference guide for LLM-based vulnerability detection in binary code. Provides best practices, techniques, and prompting strategies for using LLMs to find vulnerabilities in stripped binaries, firmware, and decompiled code. Use when analyzing binaries with AI, writing vulnerability analysis prompts, or optimizing detection pipelines.

2026-03-165

binary-audit

rysweet/skwaq

Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.

2026-03-115

compare-binaries

rysweet/skwaq

Compare two binaries for security differences. Use for patch analysis or regression testing.

2026-03-115

cwe-lookup

rysweet/skwaq

Look up CWE entries and explain their relevance. Use when discussing vulnerability types or CWE classifications.

2026-03-115

explain-vuln

rysweet/skwaq

Explain a specific vulnerability finding in detail with remediation guidance. Use when the user wants to understand a finding or how to fix it.

2026-03-115

source-audit

rysweet/skwaq

Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

2026-03-115

Fonte

rysweet

rysweet/skwaq

Abrir repositório GitHub Ver repositórios do creator

Comando de instalação

Download

Executar no Manus

Útil paraSOC

Analistas de segurança da informaçãoInformática e Matemática15-1212L4

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats