Agent Skills › codexstar69/bug-hunter › threat-model-generation

threat-model-generation

GitHub

基于STRIDE模型为仓库生成威胁建模和安全配置，识别信任边界与漏洞模式，供下游安全技能使用。

skills/threat-model-generation/SKILL.md codexstar69/bug-hunter

Trigger Scenarios

仓库无现有威胁模型架构发生重大变更需要更新信任边界上下文的安全审查用户明确要求生成威胁模型

Install

npx skills add codexstar69/bug-hunter --skill threat-model-generation -g -y

More Options

Use without installing

npx skills use codexstar69/bug-hunter@threat-model-generation

指定 Agent (Claude Code)

npx skills add codexstar69/bug-hunter --skill threat-model-generation -a claude-code -g -y

安装 repo 全部 skill

npx skills add codexstar69/bug-hunter --all -g -y

预览 repo 内 skill

npx skills add codexstar69/bug-hunter --list

SKILL.md

Frontmatter

{
    "name": "threat-model-generation",
    "description": "Generate or refresh a STRIDE-based threat model for the current repository using Bug Hunter-native artifacts. Use whenever the repository has no threat model yet, the architecture changed materially, a security review needs fresh trust-boundary context, or the user explicitly asks for a threat model."
}

Threat Model Generation

This is a bundled local Bug Hunter companion skill. It generates portable threat-model artifacts under .bug-hunter/.

Purpose

Create the security context that the other security skills depend on:

trust boundaries
major components
STRIDE threats
vulnerability pattern library
severity/config defaults

Required outputs

Write:

.bug-hunter/threat-model.md
.bug-hunter/security-config.json

Workflow

Read .bug-hunter/triage.json if available for file structure and domain hints.
Inspect the repository to identify:
- languages and frameworks
- public/authenticated/internal entry points
- data stores and external integrations
- sensitive assets and trust boundaries
Generate a concise STRIDE threat model.
Generate a matching security config with thresholds and tech-stack metadata.

Compatibility

prompts/threat-model.md is generated from this skill for older clients. This skill is the canonical source and must be edited instead of the generated compatibility prompt.