Browse 182,092 skills across 14 categories.
Cyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment, STIX/TAXII and M...
Reviews specifications for UI-layer security risks including data spillage paths, implicit trust, and misconfiguration v...
Use when the user asks to build or update a threat-actor profile, "tell me about actor X" / "profile actor Y", or anothe...
Structured threat assessment methodology. Intent + Capability + Opportunity = Threat Level. Use when formally evaluating...
Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry. Covers h...
Activate when the user needs help conducting proactive threat hunting, investigating suspicious activity, or building hy...
Proactively search for security threats, vulnerabilities, and suspicious patterns in applications and infrastructure bef...
Proactive threat hunting, IOC extraction, MITRE ATT&CK mapping, behavioral anomaly detection, log analysis correlation
Use for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and incident detection valid...
Use when proactively hunting for undetected intruders in an environment you are authorized to defend. Covers hypothesis-...
Use when working with cyber threat intelligence on a defensive team: collecting IOCs, evaluating feeds, running a MISP i...
Threat intelligence fusion skill for collecting, normalizing, deduplicating, enriching, and operationalizing IOCs and TT...
Activate when the user needs help integrating threat intelligence feeds, configuring API-based lookups, creating custom...
Use for authorized OSINT and cyber threat intelligence that enriches IOCs, campaigns, impersonation, scams, or threat ac...
Cyber Threat Intelligence gathering, IOC extraction, threat analysis, and intelligence reporting. Process threat data an...
Research, verify, assess, and publish evidence-based cyber threat intelligence from dark web forums, Telegram, ransomwar...
조사 대상인 다크웹·텔레그램·랜섬웨어·데이터 유출·해킹그룹·취약점·캠페인 정보를 수집하고, 주장과 증거를 분리해 진위와 위험도를 검증한 뒤 재현 가능한 위협 인텔리전스 리포트, 내부 브리핑, 카드뉴스 원고, X 게시...
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, cre...
Perform STRIDE threat modeling on application architecture to identify spoofing, tampering, repudiation, info disclosure...
STRIDE threat modeling before implementing security-sensitive features. Use when: threat, STRIDE, attack surface, securi...
Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or...
This skill provides structured methodologies for identifying, analyzing, and mitigating security threats in system desig...
Use to conduct STRIDE threat modeling for a system or feature design.
STRIDE threat modelling — spoofing, tampering, repudiation, disclosure, DoS, EoP. Deep-dive for /launch-check security.
Routes an explicitly requested threat model or an existing scan's modeling phase to the original native threat-model ski...
Threat-model a system or feature to find where it could be attacked, before you build it. Use when asked to threat-model...
Write a threat model document. Use when the user says "threat model", "threat modeling", "STRIDE analysis", "attack surf...
Produces a threat model — purpose, deployment, trusted inputs, untrusted inputs — for a new feature or component before...
Build evidence-backed threat models for LLM, RAG, multimodal, model-serving, and agentic systems. Use when designing or...
Verify attack prerequisites are realistic. Block unrealistic threat models pre-submission. Matches "threat model", "atta...
Threat Model Creator - Auto-activating skill for Security Advanced.Triggers on: threat model creator, threat model creat...
Score how current an org's threat model is against 2026 reality — 14-item checklist, currency percentage, prioritized up...
Create a lightweight threat model from data flows, trust boundaries, assets, actors, and abuse cases for a feature or se...
Use when starting an engagement, before exploitation, or whenever the attack surface changes — build/validate the threat...
Generate STRIDE-based threat models with intelligent threat analysis, CVSS risk scoring, and mitigation recommendations
Generate a STRIDE-based security threat model for a repository. Use when setting up security monitoring, after architect...
Creates comprehensive STRIDE-based threat models from architecture descriptions, design documents, or code repositories....
Generate threat models using STRIDE, PASTA, or VAST methodologies
STRIDE threat modeling and privacy impact assessment to generate security/privacy requirements. Use before requirement-a...
Identify assets, trust boundaries, abuse cases, attack paths, threats, and required security controls.
Describe what this skill helps an agent do.
Security analysis using STRIDE/ATT&CK/Kill Chain frameworks (Stages 3, 4, 5, 6). Identifies threats, assesses risk, and...
Perform threat modeling — STRIDE, attack trees, data flow diagrams, and mitigation recommendations.
Produce AEOS threat models for prompt injection, tool poisoning, secret leakage and package tampering. Use when the user...
Audit, write, or revise a threat model using STRIDE. Use when asked what could go wrong with a system, to threat-model o...
Analyzing codebases to systematically identify and categorize potential security threats, producing a threat model repor...
Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when...
Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mit...
Identifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry points,...
Use when designing new systems, features, or integrations to identify potential security threats and vulnerabilities bef...
Identify and analyze security threats. Use when designing systems, reviewing architecture, or assessing risk. Covers STR...
建立或更新以 DFD 為核心、用 STRIDE 輔助辨識威脅的系統威脅模型；適用於新系統設計、既有系統逆向分析，或在安全檢核時同步整理威脅與改善工作。
Perform STRIDE threat modeling for each component and trust boundary and produce a threat register. Use when reviewing a...
STRIDE/LINDDUN ASSESS threat model. Defense-only. Use for holding automation surfaces.
Identify architectural security risks, map trust boundaries, and evaluate attack paths using STRIDE and risk assessment...
Use this skill when you need evidence-bounded threat-modeling analysis and validation preparation; triggers include 威胁建模...
Use when designing a system and identifying what could go wrong. Applies STRIDE to a data-flow model, ranks threats by r...
Perform threat modeling for a system or feature. Use when a senior developer needs security risk assessment.
Use when implementing auth, file uploads, payments, or external APIs. Applies STRIDE framework systematically. Triggers:...
Structured security analysis using OWASP Four-Question Framework and STRIDE methodology. Generates threat matrices with...
Conduct structured threat modeling for software systems using established methodologies to identify, prioritize, and mit...
Decide what a design must be true before code exists: naming assets and actors, locating trust boundaries, producing a w...
Structured threat modeling skill using the PASTA framework (Process for Attack Simulation and Threat Analysis) combined...
Every methodology — STRIDE, PASTA, LINDDUN, attack trees — is a technique for
Runs a structured STRIDE threat model on any system design, API specification, or codebase. Auto-invoked when the user d...
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attac...
Perform STRIDE analysis and mitigation planning.
Threat modeling methodologies for mid-2026 — STRIDE, PASTA, LINDDUN (privacy), Cyber Kill Chain, Diamond Model, MITRE Un...
Build a mental and visual map of the target application before hunting — entry points, trust boundaries, data flows, and...
Use when the user asks to find ThreatDown (Malwarebytes) OneView endpoints that stopped checking in across customer site...
Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a cross-tenant offline sto...
Build browser-based Three.js and WebGL scenes, animations, and interactive 3D visualizations with a small vanilla JavaSc...
Three.js and WebGL adapter patterns for HyperFrames. Use when creating deterministic Three.js scenes, WebGL canvas layer...
Three.js performance optimization and best practices guidelines. Use when writing, reviewing, or optimizing Three.js cod...
《三体》赛道AI视频创作工具,提供结构化的多智能体协作流程、素材生成与视频合成,涵盖选题深化、视觉设计、音频生成、视频制作全流程
Create a React Three Fiber 3D component for the Kardashev Network visualization
Three.js/React Three Fiber 전문가. "3D", "Three.js", "R3F", "모델" 관련 질문 시 사용.
This prompt instructs an AI to act as a professional studio family portrait director and produce a single polished, phot...
Evaluate an animath plan, proposal, or design decision from three independent expert perspectives (framework maintainer,...
Expert guidance for Three.js and React Three Fiber development with modern React, TypeScript, and performance best pract...
This skill should be used when the user asks to "create a 3D scene", "add a mesh", "implement OrbitControls", "load a GL...
Scaffold and build interactive 3D visualizations using Three.js with emphasis on algorithmic art, sacred geometry, tempo...
World Pulse: When adding or modifying 3D elements on the globe in `src/renderer/components/Globe/`.
Fully autonomous Three Kings program runner — every 3 days it gate-checks a per-URL ladder ledger, executes EDIT_NOW run...
Server → Service → Repository pattern for feature organization
3-MATCH colored subgraph isomorphism gadget for 3-SAT reduction
Design a Montessori three-period lesson for introducing concepts through concrete materials and naming. Use when teachin...
A comprehensive framework for defining and communicating product strategy through vision, strategic bets, and a feasibil...
Use after code changes. Syncs CLAUDE.md, CONTEXT.md, and docs/ai-context/ automatically.
Run every client's 3CX phone system from one CLI: trunk, version, licence and backup health across the whole fleet, plus...
Create and modify 3D parametric models in the threedee design environment. Use when: (1) creating new 3D objects, geomet...
Use when building or debugging interactive 3D scenes on the web with Three.js (scene/camera/renderer, lights/materials,...
Expert system for building 3D/WebGL/WebGPU experiences with Three.js and its full tooling ecosystem. Acts as a master wh...
Build immersive 3D web experiences with Three.js - WebGL/WebGPU library for scenes, cameras, geometries, materials, ligh...
Build 3D web apps with Three.js (WebGL/WebGPU). Use for 3D scenes, animations, custom shaders, PBR materials, VR/XR expe...
Build 3D web apps with Three.js (WebGL/WebGPU). 556 searchable examples, 60 API classes, 20 use cases. Actions: create 3...
Three.js skills for creating 3D elements and interactive experiences in the browser — scenes, materials, controls, and p...
Three.js and React Three Fiber (R3F) 3D development — scene setup, lighting, materials, physics, performance, and intera...
Comprehensive guide to threejs. Master the concepts, implementation, best practices, and real-world applications of thre...