NeVibeCode · 11 items
Skills and MCP tagged “threat-modeling”
security-requirement-extraction skill Turns a threat model and business context into testable security requirements: user stories, acceptance criteria, test cases.
Claude Code CX Codex Cursor
24,845installs
stride-analysis-patterns skill This skill uses STRIDE to identify threats in system architecture and security decisions. Use it to structure a threat modeling session or prepare security documentation.
Claude Code CX Codex Cursor
20,506installs
attack-tree-construction skill Builds attack trees to map threat paths, spot defense gaps, and explain security risks. Useful for penetration test planning and architecture reviews.
Claude Code CX Codex Cursor
17,309installs
quickstart
official skill Guides a first pass through the code-security repository, from threat modeling to a canary scan. It also answers repo-specific questions with cited sources.
Claude Code CX Codex Cursor +1
1,100installs
threat-model-analyst
official skill Runs STRIDE-A threat modeling for a repository or system. It can also update an earlier report against the current code or a chosen commit.
GitHub Copilot
1,500installs
security-auditor skill Turns your AI coder into a security expert: conducts audits, analyzes vulnerabilities, reviews SDLC and compliance with OWASP, GDPR, PCI-DSS standards.
Claude Code CX Codex Cursor +1
1,400installs
mantis-plan
official skill Generates a targeted security review plan based on your threat model and historical findings. Run at the start of a review campaign to map code boundaries and prioritize what to check.
Claude Code CX Codex Cursor +1
1,600installs
senior-security skill Builds STRIDE and DREAD threat models, scans code for secrets, and routes other security work to specialist skills.
Claude Code
1,277installs
security-hardening command This command runs a staged security review: vulnerability scanning, threat modeling, and architecture checks. Use it when a project needs a documented hardening pass.
Claude Code CX Codex Cursor
437installs
tm7-threat-model
official skill Creates .tm7 threat model files for Microsoft Threat Modeling Tool and adds STRIDE threats. Use it when a system description must become an editable threat model diagram.
GitHub Copilot
29installs
attack-path-analysis
official skill Evaluates plausible security findings in Codex and ChatGPT, traces paths from source to sink, and calibrates severity against the repository threat model.
CX Codex GP ChatGPT
27installs