AgentHubAgentHub

security-threat-model

SkillSkillsMP

io.github.tech-leads-club/agent-skills/security-threat-model · vmain

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Use when the user asks to threat model a codebase or path, enumerate threats or abuse paths, or perform AppSec threat modeling. Do NOT use for general architecture summaries, code review, security best practices (use security-best-practices), or non-security design work.

概览

security-threat-model 是一个Agent Skill,收录自 SkillsMP。本页提供 Cursor、Claude Code 等客户端的安装配置片段。

Agent Skill 是带 SKILL.md 的指令包。安装后,AI 会根据 description 在匹配任务时自动加载,无需每次手动粘贴提示词。

安装

选择你的平台查看安装方式

# 通用 CLI(Cursor / Claude Code / Codex 等均支持)
npx skills add tech-leads-club/agent-skills@security-threat-model

使用方式

安装完成后,在对话中直接描述你的任务(或提及技能名称)。Agent 会先读取 SKILL.md 的 description 判断是否启用,再按其中的步骤执行。可用 /skills(Claude Code)或在设置中查看已加载的 Skills。

相关资源

统一 Manifest

{
  "id": "io.github.tech-leads-club/agent-skills/security-threat-model",
  "type": "skill",
  "version": "main",
  "displayName": "security-threat-model",
  "description": "Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Use when the user asks to threat model a codebase or path, enumerate threats or abuse paths, or perform AppSec threat modeling. Do NOT use for general architecture summaries, code review, security best practices (use security-best-practices), or non-security design work.",
  "author": {
    "name": "tech-leads-club",
    "url": "https://github.com/tech-leads-club"
  },
  "repository": {
    "url": "https://github.com/tech-leads-club/agent-skills",
    "source": "github",
    "subfolder": "packages/skills-catalog/skills/(security)/security-threat-model"
  },
  "homepage": "https://skillsmp.com/skills/tech-leads-club-agent-skills-packages-skills-catalog-skills-security-security-threat-model-skill-md",
  "distribution": {
    "packages": [
      {
        "registryType": "source",
        "identifier": "tech-leads-club/agent-skills@security-threat-model",
        "version": "main",
        "runtimeHint": "npx skills add"
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "codex",
    "vscode"
  ],
  "keywords": [
    "stars:4559"
  ],
  "provenance": {
    "origin": "skillsmp",
    "originalId": "tech-leads-club-agent-skills-packages-skills-catalog-skills-security-security-threat-model-skill-md",
    "originalUrl": "https://skillsmp.com/skills/tech-leads-club-agent-skills-packages-skills-catalog-skills-security-security-threat-model-skill-md",
    "isOfficial": false,
    "status": "active"
  }
}
security-threat-model — Agent Skill 安装与配置 · AgentHub