Engage.Threatmodel — Security skill for Claude Code
Materialize, lint, and drift-check the engagement threat model.
How to install Engage.Threatmodel
Installs to ~/.claude/skills/hypnguyen1209-offensive-claude-engage.threatmodel/SKILL.md
mkdir -p ~/.claude/skills/hypnguyen1209-offensive-claude-engage.threatmodel && curl -fsSL https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/HEAD/commands/engage.threatmodel.md -o ~/.claude/skills/hypnguyen1209-offensive-claude-engage.threatmodel/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Engage.Threatmodel does
description: Materialize, lint, and drift-check the engagement threat model
/engage.threatmodel
Builds the threat model from recon-osint output, lints it for completeness, and diffs a re-run against the reviewed baseline to catch new unreviewed attack surface (drift). Backed by `skills/threat-model-discipline/` + `scripts/threatmodel_lint.py`; the drift check hooks into `/engage.gate`.
Usage
`/engage.threatmodel {materialize|lint|drift} ...`
Process
- Materialize — fro
Alternatives in Security
- Security Threat Model — Generate repo-specific threat models identifying trust boundaries 14.6k ★
- Brooks Audit — Run a Brooks-Lint architecture audit 1.5k ★
- Clawsec — Security skill suite with drift detection, automated audits, and skill integrity verification 798 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Threatmodel
Generate a STRIDE/DREAD threat model for the repository, a feature, or a component.
Engage.Init
Initialize a new security engagement following the Kill Chain workflow
Ccc Audit
Run npm audit + bundle size check + lint scan. Returns vulnerabilities, oversized bundles, and lint errors.
Skill Quality Suite
Quality, security, compatibility and publishing toolkit for AI Agent Skills - lint and validate SKILL.md, scan
Check Ignores
Audit type/lint suppression comments across the codebase
Threat Model
Perform a threat model for the following feature or component:
Related Agents
Threat Detection Engineer
Principal Threat Detection Engineer with VETO authority over detection-as-code coverage, false-positive-rate d
Project Auditor
Read-only health audit of the VibeFrame monorepo. Use for a periodic project review — structure, CLI/doc drift
E2e Selector Drift Reviewer
Use this agent when Playwright E2E spec files under apps//e2e/ (e.g. apps/hospitality/e2e/.spec.ts) are added