Threat Model Analyst
Builds a STRIDE-A threat model of a repository and keeps it current as code moves.
Install
gh skills install github/awesome-copilot threat-model-analyst
Bir depo için tehdit modeli istendiğinde ya da eldeki rapor taban alınıp güncel commit'e göre yenilenmesi istendiğinde
- Author
- Vijay Chegu
- License
- MIT
The first run produces an architecture overview, data-flow diagrams, the STRIDE-A analysis itself, a prioritized findings list and a short executive assessment. The second mode is the interesting one: hand it the earlier report as a baseline and it re-verifies every item against the current commit, so findings come back marked new, resolved or still present, with a heatmap and an embedded HTML comparison. Skeleton files fix the shape of each output section, which is what keeps two runs months apart comparable. It stays dormant unless a threat model is explicitly requested.
Similar skills
AWS Agents for DevSecOps
SkillRoutes incident, release-readiness, scan and pentest work to the AWS DevOps and Security agents.
Security and Hardening
SkillThreat-models the trust boundaries before writing a single control.
Claude Security
SkillDeep vulnerability scan of your own code, with every finding challenged before it is reported.
Comments(0)
Sign in to comment