MCP App StoreMCP App Store
from antigravity-awesome-skills42,325
Apply the STRIDE threat-modeling methodology to systematically identify and document security threats during design, reviews, or audits.
Apply the STRIDE methodology (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) to systematically identify threats in systems. This skill guides an agent through clarifying goals and inputs, walking architecture components, mapping threats to STRIDE categories, and producing concise threat documentation and mitigation suggestions. It links to an implementation playbook when examples are required.
Use during threat-modeling sessions, architecture reviews, security design assessments, compliance preparation, or when training teams on systematic threat identification. Avoid using it for unrelated security tasks or non-STRIDE domains.
Works well with developer/security-focused agent toolchains such as Claude Code, Cursor, Codex CLI, and Gemini CLI — any agent that can read project files and produce structured documentation.
STRIDE threat modeling skill with clean SKILL.md frontmatter but extremely thin content — just generic boilerplate instructions with no concrete steps, output format, or examples. The real substance is referenced in resources/implementation-playbook.md but not bundled, making it a dead reference. An agent can't actually perform STRIDE analysis from this skill alone.
Low-effort skill with proper frontmatter but minimal actual content. The body provides no structured methodology, no threat categories, no output templates — just 'apply best practices'. The unbundled resource reference makes it non-functional as shipped.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
Angular Migration
Guides developers through migrating AngularJS (1.x) apps to modern Angular (2+), with hybrid ngUpgrade approaches, component/service conversions, DI strategies,
DOCX Official
Workflows and tools to create, edit, analyze, and convert .docx files safely and reproducibly, including tracked-change redlining and raw OOXML access.
Makepad Basics
Guides agents to create, structure, and bootstrap Rust Makepad applications using makepad-widgets (dev branch) with code patterns, macros, and event handling.
Makepad Event & Action Handling
Guides handling of input, lifecycle, and widget actions in Makepad apps — events, hit testing, timers, and parent-child action flow.
Makepad Basics
Guides agents to generate and explain Rust Makepad apps: setup, live_design!, app_main!, widget wiring and common patterns for cross-platform GUI development.
Makepad Basics (Claude variant)
Agent skill for Makepad starter apps: generates Rust examples, explains live_design! patterns, and guides event handling and widget wiring for beginner projects
Claimable Postgres (pg.new)
Provision temporary Postgres databases (pg.new) instantly for demos, prototyping, and local development; returns a connection string and claim URL (72-hour expi
Stitch → Remotion Walkthrough
Generate polished walkthrough videos from Stitch project screens using Remotion, with transitions, zooms, and contextual overlays.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
GRC & Compliance (ServiceNow)
Guides Governance, Risk & Compliance (GRC) work in ServiceNow: policies, controls, risk records, audits and ES5 script examples for automating GRC workflows.
BK-CI Design Patterns Guide
Practical guide to design patterns used in the BK-CI project (Kotlin/Spring). Covers factory, strategy, singleton, decorator, observer, template method, chain-o
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r