Analyze Dethernety threat models to generate attack surface summaries.
npx skills add https://github.com/dether-net/dethernety-oss --skill surface-dether-net
Please help me install this Agent Skill. Skill: surface Source: https://github.com/dether-net/dethernety-oss/tree/main/apps/dethereal/skills/surface Command: npx skills add https://github.com/dether-net/dethernety-oss --skill surface-dether-net
This Skill provides a summary of an attack surface for Dethernety threat models, highlighting components, trust boundary crossings, and control gap analysis.
Use the surface skill on a directory path to generate an attack surface summary for a Dethernety threat model.
High-intent search queries and answers about installing and using this skill.
To generate an attack surface summary for a threat model, analyze the model directory to extract component breakdowns, trust boundary crossings, and control gap analysis. This process identifies data flows, encryption postures, and exposure counts across the modeled architecture.
Trust boundary crossing analysis in threat modeling identifies data flows between different security boundaries, detailing the encryption, authentication, and enforcement posture applied to each transition. It highlights potential vulnerabilities where data moves between trusted and untrusted zones.
Identifying control coverage gaps and MITRE ATT&CK mapping requires analyzing the threat model to produce a two-tier coverage report. This highlights inferred and formal control coverage alongside which MITRE ATT&CK tactics are covered or missing.
Yes, you can detect credential reuse and cross-model reference gaps in Dethernety threat models by analyzing credential topology. This alerts you about shared credentials and missing references across multiple interconnected threat models.
Finding components with no monitoring tools configured in your attack surface requires a detection coverage analysis. This scans the threat model to identify specific architectural components lacking monitoring configurations, exposing blind spots in operational visibility.
Yes, model synchronization is required before analyzing attack surface exposures if the model data is not current. The analysis reports exposure counts and suggests synchronization to ensure accurate component and trust boundary assessments.
dether-netClassify components, boundaries, data flows, and data items in Dethernety threat models.
AradotsoQuery security detection rules across multiple formats with MITRE ATT&CK coverage analysis.
dakshrawat298-gifMap architecture, trust boundaries, data flows, and threat models into an Audit Context Document.
LetPeopleWorkEvaluate code plans and implementations against structured review criteria with severity levels.
