threatDeep threat modeling workflow—system decomposition, trust boundaries, STRIDE-style threats, mitigations, prioritization, and tracking. Use when designing new...
Install via ClawdBot CLI:
clawdbot install mike47512/threatGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Generated May 7, 2026
An e-commerce platform models threats for its new payment integration. Using STRIDE, the team identifies spoofing risks via fake merchant accounts and tampering of transaction data in transit. Mitigations include mutual TLS and input validation.
A healthcare startup conducts threat modeling for a FHIR API exposing patient records. They map trust boundaries between the public internet and internal services, uncovering information disclosure risks from insufficient authorization. Controls include OAuth 2.0 and audit logging.
A fintech company threat models a new mobile banking feature. The team diagrams data flows and identifies elevation-of-privilege risks if a device is rooted. Mitigations include runtime integrity checks and secure key storage.
A SaaS provider models threats for a multi-tenant deployment. They discover data isolation gaps between tenants (information disclosure) and denial-of-service vulnerabilities via noisy neighbors. Controls involve row-level security and rate limiting.
An IoT manufacturer threat models a smart home system. STRIDE reveals spoofing risks for device firmware updates and tampering of sensor data. The team plans code signing and integrity verification for all updates.
Offer threat modeling workshops as a paid service to enterprise clients, charging per engagement. Revenue comes from hourly consulting or fixed-price deliverables like threat model documents.
Build a collaborative online tool that guides teams through the six-stage workflow with templates and auto-generated diagrams. Revenue from monthly subscriptions per user or team.
Embed threat modeling capabilities into existing CI/CD or security platforms (e.g., Jira, AWS Security Hub) as a premium feature. Revenue from platform license up-sells or per-model charges.
💬 Integration Tip
Integrate this workflow into your feature planning process by linking threat model tickets to user stories in Jira or Linear, ensuring mitigations are tracked alongside development tasks.
Scored May 7, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.