Agent Skills: security-threat-model
Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during implementation. Use when touching authentication, authorization, payments, secrets, user data, uploads, webhooks, admin tools, innerHTML/eval/exec, dependency upgrades, or cross-tenant access.
ID: majiayu000/claude-arsenal/security-threat-model
28026
Install this agent skill to your local
Skill Files
The files that make up security-threat-model.
More agent skills
- cpp-testingUse only when writing/updating/fixing C++ tests, configuring GoogleTest/CTest, diagnosing failing or flaky tests, or adding coverage/sanitizers.
- simplifySimplifies code for clarity without changing behavior. Use for readability, maintainability, and complexity reduction after behavior is understood.
- inertiaHow to work effectively with Inertia, always use when developing frontend features
- php-symfonySymfony framework mastery - Doctrine, DI container, Messenger, and enterprise architecture
- compiler-portPort a compiler pass from TypeScript to Rust. Gathers context, plans the port, implements in a subagent with test-fix loop, then reviews.
- research-grantsWrite competitive research proposals for NSF, NIH, DOE, DARPA, and Taiwan NSTC. Agency-specific formatting, review criteria, budget preparation, broader impacts, significance statements, innovation narratives, and compliance with submission requirements.