Open source alternatives to threat-model-analyst
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Launchgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Launchopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Launchandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Launchmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Launchod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Launchgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
About threat-model-analyst
threat-model-analyst
Full STRIDE-A threat model analysis and incremental update skill
threat-model-analyst is an agent skill from the github/awesome-copilot collection that performs full STRIDE-A threat model analysis, which adds abuse cases to the STRIDE categories, for repositories and systems. It also applies Zero Trust principles and defense-in-depth analysis, and it flags secrets, insecure trust boundaries and architectural risks. It works in two modes. A single analysis covers the whole system. An incremental mode is preferred for follow-up work: when the user asks to update, refresh or re-run a threat model and a prior report folder exists, the skill compares the current code with the baseline report and reports what has changed. The baseline is either named by the user or found as the most recent threat model folder that holds a threat inventory file. The mode is chosen first, from the wording of the request and the folders that are present. It is useful for security teams and developers who want a structured review of a system, and for keeping a threat model current as the code changes. The findings are the agent's analysis, so the threats it lists should be assessed for likelihood and impact by people who know the system. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 1.5K installs and passing results from three security audits at the time of the scan.
- Price
- Free
- Made by
- github
- Category
- AI Skills
- Website
- github.com/github/awesome-copilot/threat-model-analyst