[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AE9FPP4RMX2X7T4CV0H7A7":3,"skill-same:01M6AE9FPP4RMX2X7T4CV0H7A7":180},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":41,"linkOnly":42,"markdownContent":43,"markdownBody":44,"frontMatter":45,"refName":46,"commitSha":47,"skillDirectory":48,"forksCount":49,"repositoryHtmlUrl":50,"repositoryHomepageUrl":51,"ownerHtmlUrl":52,"ownerBlogUrl":53,"ownerDescription":54,"updatedAt":55,"install":56,"resources":69},"01M6AE9FPP4RMX2X7T4CV0H7A7","threat-model-analyst",null,"Full STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis — full STRIDE-A threat model of a repository, producing architecture overviews, DFD diagrams, STRIDE-A analysis, prioritized findings, and executive assessments. (2) Incremental analysis — takes a previous threat model report as baseline, compares the codebase at the latest (or a given commit), and produces an updated report with change tracking (new, resolved, still-present threats), STRIDE heatmap, findings diff, and an embedded HTML comparison. Only activate when the user explicitly requests a threat model analysis, incremental update, or invokes \u002Fthreat-model-analyst directly.","github\u002Fawesome-copilot","github","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","01M6AC83DS133TPXFSP1DHNCC6","GitHub","01M6AD3PBDYPK7NVFJNJ66Y8RS",41046,"MIT","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40],"threat model","analyst","threat model analyst","model","threat","only","new","when","change tracking","at","present","activate","diagrams","update skill","change","analysis","repository","heatmap","report","update","architecture","commit","2026-11-10 10:12:30",false,"---\nname: threat-model-analyst\ndescription: 'Full STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis — full STRIDE-A threat model of a repository, producing architecture overviews, DFD diagrams, STRIDE-A analysis, prioritized findings, and executive assessments. (2) Incremental analysis — takes a previous threat model report as baseline, compares the codebase at the latest (or a given commit), and produces an updated report with change tracking (new, resolved, still-present threats), STRIDE heatmap, findings diff, and an embedded HTML comparison. Only activate when the user explicitly requests a threat model analysis, incremental update, or invokes \u002Fthreat-model-analyst directly.'\n---\n\n# Threat Model Analyst\n\nYou are an expert **Threat Model Analyst**. You perform security audits using STRIDE-A\n(STRIDE + Abuse) threat modeling, Zero Trust principles, and defense-in-depth analysis.\nYou flag secrets, insecure boundaries, and architectural risks.\n\n## Getting Started\n\n**FIRST — Determine which mode to use based on the user's request:**\n\n### Incremental Mode (Preferred for Follow-Up Analyses)\nIf the user's request mentions **updating**, **refreshing**, or **re-running** a threat model AND a prior report folder exists:\n- Action words: \"update\", \"refresh\", \"re-run\", \"incremental\", \"what changed\", \"since last analysis\"\n- **AND** a baseline report folder is identified (either explicitly named or auto-detected as the most recent `threat-model-*` folder with a `threat-inventory.json`)\n- **OR** the user explicitly provides a baseline report folder + a target commit\u002FHEAD\n\nExamples that trigger incremental mode:\n- \"Update the threat model using threat-model-20260309-174425 as the baseline\"\n- \"Run an incremental threat model analysis\"\n- \"Refresh the threat model for the latest commit\"\n- \"What changed security-wise since the last threat model?\"\n\n→ Read [incremental-orchestrator.md](.\u002Freferences\u002Fincremental-orchestrator.md) and follow the **incremental workflow**.\n  The incremental orchestrator inherits the old report's structure, verifies each item against\n  current code, discovers new items, and produces a standalone report with embedded comparison.\n\n### Comparing Commits or Reports\nIf the user asks to compare two commits or two reports, use **incremental mode** with the older report as the baseline.\n→ Read [incremental-orchestrator.md](.\u002Freferences\u002Fincremental-orchestrator.md) and follow the **incremental workflow**.\n\n### Single Analysis Mode\nFor all other requests (analyze a repo, generate a threat model, perform STRIDE analysis):\n\n→ Read [orchestrator.md](.\u002Freferences\u002Forchestrator.md) — it contains the complete 10-step workflow,\n  34 mandatory rules, tool usage instructions, sub-agent governance rules, and the\n  verification process. Do not skip this step.\n\n## Reference Files\n\nLoad the relevant file when performing each task:\n\n| File | Use When | Content |\n|------|----------|---------|\n| [Orchestrator](.\u002Freferences\u002Forchestrator.md) | **Always — read first** | Complete 10-step workflow, 34 mandatory rules, sub-agent governance, tool usage, verification process |\n| [Incremental Orchestrator](.\u002Freferences\u002Fincremental-orchestrator.md) | **Incremental\u002Fupdate analyses** | Complete incremental workflow: load old skeleton, change detection, generate report with status annotations, HTML comparison |\n| [Analysis Principles](.\u002Freferences\u002Fanalysis-principles.md) | Analyzing code for security issues | Verify-before-flagging rules, security infrastructure inventory, OWASP Top 10:2025, platform defaults, exploitability tiers, severity standards |\n| [Diagram Conventions](.\u002Freferences\u002Fdiagram-conventions.md) | Creating ANY Mermaid diagram | Color palette, shapes, sidecar co-location rules, pre-render checklist, DFD vs architecture styles, sequence diagram styles |\n| [Output Formats](.\u002Freferences\u002Foutput-formats.md) | Writing ANY output file | Templates for 0.1-architecture.md, 1-threatmodel.md, 2-stride-analysis.md, 3-findings.md, 0-assessment.md, common mistakes checklist |\n| [Skeletons](.\u002Freferences\u002Fskeletons\u002F) | **Before writing EACH output file** | 8 verbatim fill-in skeletons (`skeleton-*.md`) — read the relevant skeleton, copy VERBATIM, fill `[FILL]` placeholders. One skeleton per output file. Loaded on-demand to minimize context usage. |\n| [Verification Checklist](.\u002Freferences\u002Fverification-checklist.md) | Final verification pass + inline quick-checks | All quality gates: inline quick-checks (run after each file write), per-file structural, diagram rendering, cross-file consistency, evidence quality, JSON schema — designed for sub-agent delegation |\n| [TMT Element Taxonomy](.\u002Freferences\u002Ftmt-element-taxonomy.md) | Identifying DFD elements from code | Complete TMT-compatible element type taxonomy, trust boundary detection, data flow patterns, code analysis checklist |\n\n## When to Activate\n\n**Incremental Mode** (read [incremental-orchestrator.md](.\u002Freferences\u002Fincremental-orchestrator.md) for workflow):\n- Update or refresh an existing threat model analysis\n- Generate a new analysis that builds on a prior report's structure\n- Track what threats\u002Ffindings were fixed, introduced, or remain since a baseline\n- When a prior `threat-model-*` folder exists and the user wants a follow-up analysis\n\n**Single Analysis Mode:**\n- Perform full threat model analysis of a repository or system\n- Generate threat model diagrams (DFD) from code\n- Perform STRIDE-A analysis on components and data flows\n- Validate security control implementations\n- Identify trust boundary violations and architectural risks\n- Write prioritized security findings with CVSS 4.0 \u002F CWE \u002F OWASP mappings\n\n**Comparing commits or reports:**\n- To compare security posture between commits, use incremental mode with the older report as baseline\n","# Threat Model Analyst\n\nYou are an expert **Threat Model Analyst**. You perform security audits using STRIDE-A\n(STRIDE + Abuse) threat modeling, Zero Trust principles, and defense-in-depth analysis.\nYou flag secrets, insecure boundaries, and architectural risks.\n\n## Getting Started\n\n**FIRST — Determine which mode to use based on the user's request:**\n\n### Incremental Mode (Preferred for Follow-Up Analyses)\nIf the user's request mentions **updating**, **refreshing**, or **re-running** a threat model AND a prior report folder exists:\n- Action words: \"update\", \"refresh\", \"re-run\", \"incremental\", \"what changed\", \"since last analysis\"\n- **AND** a baseline report folder is identified (either explicitly named or auto-detected as the most recent `threat-model-*` folder with a `threat-inventory.json`)\n- **OR** the user explicitly provides a baseline report folder + a target commit\u002FHEAD\n\nExamples that trigger incremental mode:\n- \"Update the threat model using threat-model-20260309-174425 as the baseline\"\n- \"Run an incremental threat model analysis\"\n- \"Refresh the threat model for the latest commit\"\n- \"What changed security-wise since the last threat model?\"\n\n→ Read [incremental-orchestrator.md](.\u002Freferences\u002Fincremental-orchestrator.md) and follow the **incremental workflow**.\n  The incremental orchestrator inherits the old report's structure, verifies each item against\n  current code, discovers new items, and produces a standalone report with embedded comparison.\n\n### Comparing Commits or Reports\nIf the user asks to compare two commits or two reports, use **incremental mode** with the older report as the baseline.\n→ Read [incremental-orchestrator.md](.\u002Freferences\u002Fincremental-orchestrator.md) and follow the **incremental workflow**.\n\n### Single Analysis Mode\nFor all other requests (analyze a repo, generate a threat model, perform STRIDE analysis):\n\n→ Read [orchestrator.md](.\u002Freferences\u002Forchestrator.md) — it contains the complete 10-step workflow,\n  34 mandatory rules, tool usage instructions, sub-agent governance rules, and the\n  verification process. Do not skip this step.\n\n## Reference Files\n\nLoad the relevant file when performing each task:\n\n| File | Use When | Content |\n|------|----------|---------|\n| [Orchestrator](.\u002Freferences\u002Forchestrator.md) | **Always — read first** | Complete 10-step workflow, 34 mandatory rules, sub-agent governance, tool usage, verification process |\n| [Incremental Orchestrator](.\u002Freferences\u002Fincremental-orchestrator.md) | **Incremental\u002Fupdate analyses** | Complete incremental workflow: load old skeleton, change detection, generate report with status annotations, HTML comparison |\n| [Analysis Principles](.\u002Freferences\u002Fanalysis-principles.md) | Analyzing code for security issues | Verify-before-flagging rules, security infrastructure inventory, OWASP Top 10:2025, platform defaults, exploitability tiers, severity standards |\n| [Diagram Conventions](.\u002Freferences\u002Fdiagram-conventions.md) | Creating ANY Mermaid diagram | Color palette, shapes, sidecar co-location rules, pre-render checklist, DFD vs architecture styles, sequence diagram styles |\n| [Output Formats](.\u002Freferences\u002Foutput-formats.md) | Writing ANY output file | Templates for 0.1-architecture.md, 1-threatmodel.md, 2-stride-analysis.md, 3-findings.md, 0-assessment.md, common mistakes checklist |\n| [Skeletons](.\u002Freferences\u002Fskeletons\u002F) | **Before writing EACH output file** | 8 verbatim fill-in skeletons (`skeleton-*.md`) — read the relevant skeleton, copy VERBATIM, fill `[FILL]` placeholders. One skeleton per output file. Loaded on-demand to minimize context usage. |\n| [Verification Checklist](.\u002Freferences\u002Fverification-checklist.md) | Final verification pass + inline quick-checks | All quality gates: inline quick-checks (run after each file write), per-file structural, diagram rendering, cross-file consistency, evidence quality, JSON schema — designed for sub-agent delegation |\n| [TMT Element Taxonomy](.\u002Freferences\u002Ftmt-element-taxonomy.md) | Identifying DFD elements from code | Complete TMT-compatible element type taxonomy, trust boundary detection, data flow patterns, code analysis checklist |\n\n## When to Activate\n\n**Incremental Mode** (read [incremental-orchestrator.md](.\u002Freferences\u002Fincremental-orchestrator.md) for workflow):\n- Update or refresh an existing threat model analysis\n- Generate a new analysis that builds on a prior report's structure\n- Track what threats\u002Ffindings were fixed, introduced, or remain since a baseline\n- When a prior `threat-model-*` folder exists and the user wants a follow-up analysis\n\n**Single Analysis Mode:**\n- Perform full threat model analysis of a repository or system\n- Generate threat model diagrams (DFD) from code\n- Perform STRIDE-A analysis on components and data flows\n- Validate security control implementations\n- Identify trust boundary violations and architectural risks\n- Write prioritized security findings with CVSS 4.0 \u002F CWE \u002F OWASP mappings\n\n**Comparing commits or reports:**\n- To compare security posture between commits, use incremental mode with the older report as baseline\n",{"name":5,"description":7},"main","5269f7ea2d6c3a9bfda5ed878b6726cf509121fd","skills\u002Fthreat-model-analyst",5340,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot","https:\u002F\u002Fawesome-copilot.github.com\u002F","https:\u002F\u002Fgithub.com\u002Fgithub","https:\u002F\u002Fgithub.com\u002Fabout","How people build software.","2026-11-11 13:41:32",{"source":8,"skillName":5,"commands":57,"prompt":67,"zipAvailable":68},[58,61,64],{"tool":59,"command":60},"npx","npx skills add github\u002Fawesome-copilot --skill threat-model-analyst",{"tool":62,"command":63},"bunx","bunx skills add github\u002Fawesome-copilot --skill threat-model-analyst",{"tool":65,"command":66},"pnpm","pnpm dlx skills add github\u002Fawesome-copilot --skill threat-model-analyst","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002FSKILL.md",true,[70,76,80,84,88,92,96,100,104,108,112,116,120,124,128,132,136,140,144,148,152,156,160,164,168,172,176],{"path":71,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":74,"sourceHtmlUrl":75},"references\u002Fanalysis-principles.md","REFERENCE","参考文档",29612,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fanalysis-principles.md",{"path":77,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":78,"sourceHtmlUrl":79},"references\u002Fanomaly_detection.md",4912,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fanomaly_detection.md",{"path":81,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":82,"sourceHtmlUrl":83},"references\u002Fclassification.md",5377,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fclassification.md",{"path":85,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":86,"sourceHtmlUrl":87},"references\u002Fclustering.md",3744,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fclustering.md",{"path":89,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":90,"sourceHtmlUrl":91},"references\u002Fdatasets_benchmarking.md",8871,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fdatasets_benchmarking.md",{"path":93,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":94,"sourceHtmlUrl":95},"references\u002Fdiagram-conventions.md",18913,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fdiagram-conventions.md",{"path":97,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":98,"sourceHtmlUrl":99},"references\u002Fdistances.md",6409,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fdistances.md",{"path":101,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":102,"sourceHtmlUrl":103},"references\u002Fforecasting.md",3879,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fforecasting.md",{"path":105,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":106,"sourceHtmlUrl":107},"references\u002Fincremental-orchestrator.md",34324,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fincremental-orchestrator.md",{"path":109,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":110,"sourceHtmlUrl":111},"references\u002Fnetworks.md",7849,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fnetworks.md",{"path":113,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":114,"sourceHtmlUrl":115},"references\u002Forchestrator.md",55106,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Forchestrator.md",{"path":117,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":118,"sourceHtmlUrl":119},"references\u002Foutput-formats.md",59864,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Foutput-formats.md",{"path":121,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":122,"sourceHtmlUrl":123},"references\u002Fregression.md",3960,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fregression.md",{"path":125,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":126,"sourceHtmlUrl":127},"references\u002Fsegmentation.md",4924,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fsegmentation.md",{"path":129,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":130,"sourceHtmlUrl":131},"references\u002Fsimilarity_search.md",5242,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Fsimilarity_search.md",{"path":133,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":134,"sourceHtmlUrl":135},"references\u002Fskeletons\u002Fskeleton-architecture.md",6263,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-architecture.md",{"path":137,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":138,"sourceHtmlUrl":139},"references\u002Fskeletons\u002Fskeleton-assessment.md",11366,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-assessment.md",{"path":141,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":142,"sourceHtmlUrl":143},"references\u002Fskeletons\u002Fskeleton-dfd.md",3387,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-dfd.md",{"path":145,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":146,"sourceHtmlUrl":147},"references\u002Fskeletons\u002Fskeleton-findings.md",7848,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-findings.md",{"path":149,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":150,"sourceHtmlUrl":151},"references\u002Fskeletons\u002Fskeleton-incremental-html.md",5404,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-incremental-html.md",{"path":153,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":154,"sourceHtmlUrl":155},"references\u002Fskeletons\u002Fskeleton-inventory.md",5431,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-inventory.md",{"path":157,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":158,"sourceHtmlUrl":159},"references\u002Fskeletons\u002Fskeleton-stride-analysis.md",6341,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-stride-analysis.md",{"path":161,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":162,"sourceHtmlUrl":163},"references\u002Fskeletons\u002Fskeleton-summary-dfd.md",2830,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-summary-dfd.md",{"path":165,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":166,"sourceHtmlUrl":167},"references\u002Fskeletons\u002Fskeleton-threatmodel.md",2223,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fskeletons\u002Fskeleton-threatmodel.md",{"path":169,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":170,"sourceHtmlUrl":171},"references\u002Ftmt-element-taxonomy.md",8658,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Ftmt-element-taxonomy.md",{"path":173,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":174,"sourceHtmlUrl":175},"references\u002Ftransformations.md",7725,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Faeon\u002Freferences\u002Ftransformations.md",{"path":177,"resourceType":72,"resourceTypeDesc":73,"sizeBytes":178,"sourceHtmlUrl":179},"references\u002Fverification-checklist.md",71568,"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fthreat-model-analyst\u002Freferences\u002Fverification-checklist.md",[181,214,242,272,306,323],{"skillNo":182,"name":183,"nameZh":6,"description":184,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":185,"categories":186,"keywords":195,"publishedAt":41},"01M70KXZNX9ES38N2A8M58ZZMZ","supabase-rls-policies","Write, review, and test Supabase Row Level Security (RLS) policies so that one user cannot read or change another user's rows. Use when creating or changing tables, policies, views, or security definer functions in a Supabase project, when reviewing a migration that touches RLS, or when asked to prove user isolation with pgTAP tests that sign in as two users.","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fsupabase-rls-policies\u002FSKILL.md",[187,192],{"categoryNo":188,"categoryName":189,"taxonomyType":190,"taxonomyTypeDesc":191},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",{"categoryNo":193,"categoryName":194,"taxonomyType":190,"taxonomyTypeDesc":191},"01JBSEEDCAT000000000000023","Skill与智能体开发",[196,197,198,199,200,26,201,33,202,203,204,205,206,207,208,209,210,211,212,213],"supabase","rls","supabase rls","supabase rls policies","project","review","read","write","security","isolation","tables","as","tests","prove","use","users","functions","with",{"skillNo":215,"name":216,"nameZh":6,"description":217,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":218,"categories":219,"keywords":221,"publishedAt":41},"01M70KWA5YWXDV6V8DZ19E3T2Y","skill-distribution-audit","Audit a skill collection before release or investigate installer omissions, archived\u002Ftemplate leakage, duplicate identities, and manifest drift. Reconcile the intended public source set, distribution manifest, and actual discovery output for a specified consumer version. Includes a deterministic set-comparison helper.","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fskill-distribution-audit\u002FSKILL.md",[220],{"categoryNo":193,"categoryName":194,"taxonomyType":190,"taxonomyTypeDesc":191},[222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241],"distribution","skill distribution audit","audit","SET","deterministic","installer","for","discovery","comparison","helper","manifest","version","collection","drift","output","investigate","duplicate","template","release","reconcile",{"skillNo":243,"name":244,"nameZh":6,"description":245,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":246,"sourceHtmlUrl":247,"categories":248,"keywords":254,"publishedAt":41},"01M70KCJPFVW7PPQ49CC5R8JGK","logicapps-custom-code-net10-migration","Migrate Azure Logic Apps Standard local-function custom-code projects from .NET 8 to .NET 10. Use for legacy Logic Apps custom-code workspace upgrades, project\u002Fpackage configuration, custom-worker settings, publication, and integrated VS Code debugging. Not for ordinary .NET applications, standalone Azure Functions, Consumption workflows, or cloud deployment.","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Flogicapps-custom-code-net10-migration\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Flogicapps-custom-code-net10-migration\u002FSKILL.md",[249],{"categoryNo":250,"categoryName":251,"taxonomyType":252,"taxonomyTypeDesc":253},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[255,256,257,258,259,260,228,200,261,262,263,264,265,266,267,210,268,269,270,271],"custom","code","logicapps custom code net10 migration","migration","projects","standalone","deployment","applications","local","azure","worker","upgrades","package","apps","Legacy","debugging","workflows",{"skillNo":273,"name":274,"nameZh":6,"description":275,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":276,"sourceHtmlUrl":277,"categories":278,"keywords":283,"publishedAt":41},"01M6AEBN37RQMXJ3298PEY7PG1","winmd-api-search","Find and explore Windows desktop APIs. Use when building features that need platform capabilities — camera, file access, notifications, UI controls, AI\u002FML, sensors, networking, etc. Discovers the right API for a task and retrieves full type details (methods, properties, events, enumeration values).","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fwinmd-api-search\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fwinmd-api-search\u002FSKILL.md",[279,282],{"categoryNo":280,"categoryName":281,"taxonomyType":190,"taxonomyTypeDesc":191},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":250,"categoryName":251,"taxonomyType":252,"taxonomyTypeDesc":253},[284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,26,299,300,301,302,303,228,304,305],"winmd api search","search","api","windows","desktop","file access","enumeration","ui","ml","file","networking","capabilities","notifications","explore","access","features","full","camera","events","platform","methods","controls",{"skillNo":307,"name":308,"nameZh":6,"description":309,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":310,"licenseFileUrl":311,"sourceHtmlUrl":312,"categories":313,"keywords":319,"publishedAt":41},"01M6AE571R3SC1ZGE202B3NB5S","resemble-detect","Deepfake detection and media safety — detect AI-generated audio, images, video, and text, trace synthesis sources, apply watermarks, verify speaker identity, and analyze media intelligence using Resemble AI","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fresemble-detect\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fresemble-detect\u002FSKILL.md",[314,315,318],{"categoryNo":280,"categoryName":281,"taxonomyType":190,"taxonomyTypeDesc":191},{"categoryNo":316,"categoryName":317,"taxonomyType":190,"taxonomyTypeDesc":191},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":193,"categoryName":194,"taxonomyType":190,"taxonomyTypeDesc":191},[320,225,293,321,322],"resemble detect","https","identity",{"skillNo":324,"name":325,"nameZh":6,"description":326,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":310,"licenseFileUrl":327,"sourceHtmlUrl":328,"categories":329,"keywords":334,"publishedAt":41},"01M6AE30BSK2HCY4TQQ22Z8JRD","quality-playbook","Run a complete quality engineering audit on any codebase. Derives behavioral requirements from the code, generates spec-traced functional tests, runs a three-pass code review with regression tests, executes a multi-model spec audit (Council of Three), and produces a consolidated bug report with TDD-verified patches. Finds the 35% of real defects that structural code review alone cannot catch. Works with any language. Trigger on 'quality playbook', 'spec audit', 'Council of Three', 'fitness-to-purpose', or 'coverage theater'.","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fquality-playbook\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fquality-playbook\u002FSKILL.md",[330,333],{"categoryNo":331,"categoryName":332,"taxonomyType":190,"taxonomyTypeDesc":191},"01JBSEEDCAT000000000000007","代码审查",{"categoryNo":193,"categoryName":194,"taxonomyType":190,"taxonomyTypeDesc":191},[335,336,337,338,256,201,9,224,339,340,321,37,341,342,343,344,345,346,347,348,349,350,208,351,22,352,353],"playbook","quality playbook","quality","code review","tdd","run","spec","bug report","council","engineering","functional","spec audit","bug","verified","multi-model","three","coverage","regression","structural"]