agentsclimarketplace

Ciso threat model

Skill sarfaraz-munir/Claude-Code-Cyber-agents/.claude/skills/ciso-threat-model

Hierarchical CISO AI agent swarm for Claude Code — 10 specialist agents covering risk governance, compliance, threat intelligence, vulnerability management, incident response, and AI security (OWASP LLM Top 10 / MITRE ATLAS). Includes MCP tools, Claude Code skills etc.

Install
npx -y skills add sarfaraz-munir/Claude-Code-Cyber-agents --skill ciso-threat-model

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Build MITRE ATT&CK-mapped threat scenarios for specific assets or systems. Produces threat actors, techniques, detection controls, and mitigation recommendations. Use for architecture reviews, new system threat modeling, or threat landscape briefings.

SKILL.md

1.7 KB, as published. Nobody here has run it

CISO Threat Modeling

Delegates to ciso-threat-intelligence for MITRE ATT&CK-mapped threat analysis.

What This Skill Does

  • Maps attack vectors to MITRE ATT&CK techniques
  • Profiles relevant threat actors (APT groups, financially motivated, insider)
  • Builds complete threat scenarios with detection and mitigation controls
  • Produces threat landscape briefings per industry

Required Inputs

  • Scope — system name, asset list, or "full org"
  • Industry — for actor profiling
  • Attack surface — internet-facing? cloud? on-prem? insider risk?
  • Known symptoms/alerts — any existing IOCs or suspicious activity?

Execution Pattern

Agent(ciso-threat-intelligence, "Build threat model for:
  Assets: [list]
  Industry: [industry]
  Attack Surface: [surface description]
  Known IOCs/Symptoms: [any]
  
  Output: top 5 threat scenarios with MITRE mapping, actor profiles,
  detection controls, mitigation recommendations, and industry briefing"
)

Output Structure

THREAT LANDSCAPE BRIEFING: [Org/System]

TOP THREAT ACTORS
[Actor] | [Type] | [Motivation] | [Sophistication] | [Relevant TTPs]

THREAT SCENARIOS
THREAT-01: [Title]
  Actor: [name/type]
  MITRE Techniques: [T#### list]
  Attack Vector: [vector]
  Affected Assets: [list]
  Likelihood: [severity]  Impact: [severity]
  Detection Controls: [list]
  Mitigation Controls: [list]

[repeat for each scenario]

DETECTION COVERAGE GAPS
[gap] — [recommended tool/control]

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.