sc2-threat-model

What problem does it solve?

Recon reports and software reconnaissance often lack structured threat context. This skill converts recon output into a formal threat model, enabling consistent threat identification and prioritization for vulnerability testing and defense planning.

Core Features & Use Cases

• Identify threat actors and potential attack surfaces based on recon data.
• Apply STRIDE analysis to each recon entry to categorize risks.
• Build attack trees and prioritize high-value targets for remediation.
• Generate a comprehensive threat-model document for stakeholder review and remediation planning.

Quick Start

Run the sc2-threat-model script on the recon.md file to generate assessment/threat-model.md.