Skip to content
Automation
Skill

/map-threat-surface

Enumerate attackable dimensions of an artifact and rate exposure/accessibility.

From plugin
de-anthropocentric-research-engine
512200 skills

Claude Code

$ npx -y skills add yogsoth-ai/de-anthropocentric-research-engine --skill map-threat-surface --agent claude-code

SKILL.md

map-threat-surface.SKILL.md
name: map-threat-surface
description: "Enumerate attackable dimensions of an artifact and rate exposure/accessibility."

map-threat-surface

Purpose

Enumerate attackable dimensions of an artifact and rate exposure and accessibility.

Input contract

required: [artifact, threat_model, access_context]
optional: [asset_inventory, severity_scale]
constraints: [surface dimensions, access assumptions, and rating anchors must be explicit]

Procedure

1. Inventory components, interfaces, assumptions, and exposed data. 2. Enumerate attackable dimensions and access paths. 3. Rate exposure/accessibility and record untested surfaces.

Output contract

produces: [threat_surface, access_map, exposure_ratings, untested_surfaces]
delta_fields: [findings, evidence_updates, uncertainties, decisions, open_questions]

Quality gates

  • Each surface has an artifact location, access assumption, exposure rating, and rationale.

Failure and counterexamples

Do not infer low exposure from absence of an observed attack; mark untested instead.

Provenance map

  • resolved: threat-surface-mapping
@yogsoth-ai
Ships withde-anthropocentric-research-engine

A research skill graph for AI-native science. 271 markdown files. No runtime, no dependencies, no build step.

Stars on GitHub

Momentum

stars in total
512
Star history of yogsoth-ai/de-anthropocentric-research-engine on GitHub, a chart by star-history.com

More skills from other plugins.

agent-builder

agent-builder

Load immediately after an Agent intent, before the first agent_builder_* call. Governs how you create, configure, test, and…

n8n2w209k
@n8n-io@n8n-ioInstall Skill
browser-use

browser-use

Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work. Also covers…

@browser-use@browser-useInstall Skill
add-anydoc

add-anydoc

Add local office-document-to-Markdown conversion to NanoClaw agent containers with the pinned Firecrawl AnyDoc CLI. Use when…

@nanocoai@nanocoaiInstall Skill

Questions about map-threat-surface.

Which coding agents can use map-threat-surface?
map-threat-surface installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.