58 tagged threat-modeling, measured the same way as everything else here.
Browse within: appsec 34sast 33semgrep 32owasp 18audit 17hardening 17pentest 17
sickn33/agentic-awesome-skills
Skill Claude CodeCodex
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
Skill Claude CodeCodex
Python-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and automated security threat identification. Use when: (1) Creating threat models programmatically using Python code, (2) Generating data flow diagrams (DFDs) with automatic STRIDE threat identification…
Skill Claude CodeCodex
This skill should be used when the user is auditing a "polyglot monorepo", "multi-language codebase", "microservices with different languages", "Go + Python + TypeScript", or any codebase with services written in different programming languages. Provides strategies for cross-service security analysis and unified…
Skill Claude CodeCodex
This skill should be used when the user asks about "API security", "OWASP API Top 10", "BOLA", "broken object level authorization", "API authentication", "mass assignment", "GraphQL security", "gRPC security", "rate limiting", "API abuse", "REST API vulnerabilities", or needs to identify API-specific security issues…
Skill Claude CodeCodex
Detect ANY credential/secret flowing to ANY output sink. Use when asked about "credential leakage", "secret logging", "sensitive data exposure", "CWE-532", "password in logs", "token exposure", or security logging issues.
trnt-ai/trent-openclaw-security-assessment
Skill Claude CodeCodex
Assess your Agent deployment against security risks using Trent.
Skill Claude CodeCodex
Designs and reviews web3 protocols, incentive systems, token flows, governance, payments, disputes, launch specs, and threat models. Use when planning or reviewing on-chain products, DeFi mechanisms, staking or slashing models, marketplaces, DAOs, bridges, or oracle-dependent systems.