Run any Skill in Manus with one click

threat-model

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Run Skill in Manus

Overview

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

Install command

npx skills add https://github.com/rysweet/skwaq --skill threat-model

Copy and paste this command into Claude Code to install the skill

Source

rysweet/skwaq

Stars5

Forks3

UpdatedMarch 11, 2026 at 01:26

SKILL.md

readonly

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats

More from this repository

same repository

llm-binary-vuln-guide

rysweet/skwaq

Reference guide for LLM-based vulnerability detection in binary code. Provides best practices, techniques, and prompting strategies for using LLMs to find vulnerabilities in stripped binaries, firmware, and decompiled code. Use when analyzing binaries with AI, writing vulnerability analysis prompts, or optimizing detection pipelines.

2026-03-165

binary-audit

rysweet/skwaq

Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.

2026-03-115

compare-binaries

rysweet/skwaq

Compare two binaries for security differences. Use for patch analysis or regression testing.

2026-03-115

cwe-lookup

rysweet/skwaq

Look up CWE entries and explain their relevance. Use when discussing vulnerability types or CWE classifications.

2026-03-115

explain-vuln

rysweet/skwaq

Explain a specific vulnerability finding in detail with remediation guidance. Use when the user wants to understand a finding or how to fix it.

2026-03-115

source-audit

rysweet/skwaq

Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

2026-03-115

Source

rysweet

rysweet/skwaq

View GitHub Repository View Creator Repositories

Install command

Download

Run Skill in Manus

Useful forSOC

Information Security AnalystsComputer and Mathematical Occupations15-1212L4

name	threat-model
description	Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
user-invocable	true

Threat Model Generator

Generate a threat model for the current investigation.

Process

Review the attack surface: skwaq surface
Review findings: skwaq viz findings
Identify threat actors (who would attack this?)
Map attack vectors (how could they attack?)
Assess risks using STRIDE methodology:
- Spoofing - can identity be faked?
- Tampering - can data be modified?
- Repudiation - can actions be denied?
- Information Disclosure - can data leak?
- Denial of Service - can it be crashed?
- Elevation of Privilege - can access be escalated?
Prioritize threats by likelihood and impact
Suggest mitigations for top threats