菜单
Critique an existing threat model for completeness and rigor — missing STRIDE categories, unjustified skips, weak mitigations, ungrounded likelihood/impact. Use when the user asks to review, critique, or red-team a threat-model.yaml.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Big-Sleep variant analysis. Given a recently-fixed bug shape (the lines added/removed in a patch), find more code in the repository that has the same shape and is likely to carry the same defect. Reports variants linked to their seed. Deny-by-default: only the allowed_tools below are permitted.
Review a code diff or corpus for security vulnerabilities grounded in the supplied threat model. Reads code semantically, forms hypotheses, verifies them, and emits scored findings as a single JSON code block. Deny-by-default: only the allowed_tools below are permitted.
Given an architecture description or diagram, produce a STRIDE threat model plus attack trees as YAML. Use when the user asks to threat model a system.
Triage a candidate finding by deciding whether the vulnerable code is reachable from an untrusted entry point, producing the reachability axis (0-1) that feeds asec-confidence. Use when the user asks to triage a finding or assess exploitability.
Review a git diff for vulnerabilities by running Semgrep and CodeQL, then emit structured findings. Use when the user asks for a security review of a diff/PR.
Given an architecture description, diagram, or repo, produce a Phase-Zero STRIDE threat model plus attack trees as YAML conforming to asec-threat-model schema. Use when the user asks to bootstrap or create a threat model for a system.
| name | threat-model-critic |
| description | Critique an existing threat model for completeness and rigor — missing STRIDE categories, unjustified skips, weak mitigations, ungrounded likelihood/impact. Use when the user asks to review, critique, or red-team a threat-model.yaml. |
| allowed-tools | Read Grep Glob |
| argument-hint | ["threat-model.yaml"] |
| context | fork |
| agent | general-purpose |
@$ARGUMENTS[0]
asec-threat-model schema (Asset, Threat,
ThreatModel). Flag any malformed or missing required fields.likelihood and impact are grounded
(cite the data flow / boundary) or hand-waved. Flag ungrounded ratings.Emit one block per issue: location (threat id / element), category (MISSING-STRIDE / WEAK-MITIGATION / UNGROUNDED-RATING / SCHEMA / STRUCTURE), severity, and a concrete fix. End with a markdown summary table and a PASS/FAIL gate (FAIL on any MISSING-STRIDE or SCHEMA issue). Do not modify the threat model. Report only.