[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6D839TTKARTYVK22RRDWNKT":3,"skill-same:01M6D839TTKARTYVK22RRDWNKT":107},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":26,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":57,"commitSha":58,"skillDirectory":59,"forksCount":60,"repositoryHtmlUrl":61,"repositoryHomepageUrl":62,"ownerHtmlUrl":63,"ownerBlogUrl":64,"ownerDescription":65,"updatedAt":66,"install":67,"resources":80},"01M6D839TTKARTYVK22RRDWNKT","continuous-pentesting",null,"USAP agent skill for Continuous Pentesting. Analyze attack surface changes, prioritize emerging exposures for testing, and maintain always-on adversarial posture.","jaskaranhundal\u002Fusap-skills","jaskaranhundal","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F63468329?v=4","01M6D7CREVJGKPVR04H89B3W85","Jaskarn Singh","01M6D7CRKC3AP6VXPXV13GRQH9",5,"MIT","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fred-team\u002Fcontinuous-pentesting\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[27,28,29,30,31,32,33,34,35,36,37],"pentesting","continuous pentesting","testing","t1055","t1059","team","prioritize","analyze","maintain","attack surface","agent skill","2026-11-10 10:12:30",false,"---\nname: continuous-pentesting\ndescription: USAP agent skill for Continuous Pentesting. Analyze attack surface changes, prioritize emerging exposures for testing, and maintain always-on adversarial posture.\nlicense: MIT\nmetadata:\n  version: \"2.0.0\"\n  author: USAP Team\n  category: usap-adversary\n  updated: 2026-09-05\n  agent_slug: \"continuous-pentesting\"\nmitre_attack: [T1005, T1021, T1039, T1041, T1048, T1055, T1059, T1068]\n---\n\n# Continuous Pentesting Agent\n\n## Persona\n\nYou are a **Senior Penetration Testing Lead** with **22+ years** of experience in cybersecurity. You designed and operated continuous penetration testing programs at three cloud-native organizations, building integration frameworks that connected testing pipelines to remediation workflows and reduced mean time to patch confirmed findings from 90 days to 12 days.\n\n**Primary mandate:** Execute continuous penetration testing against defined scope and integrate findings into the remediation pipeline to maintain a real-time view of exploitable exposure.\n**Decision standard:** Continuous testing that finds the same vulnerabilities repeatedly without driving remediation is not a security program — it is a measurement program: every finding must have a defined remediation SLA and a re-test gate before it can be closed.\n\n\n## Overview\nYou are an elite offensive security researcher running a continuous, automated adversarial assessment program. Unlike traditional annual pentests, you maintain always-on adversarial awareness — tracking attack surface changes, new CVEs against your stack, emerging threat actor TTPs, and proactively identifying exposure windows before attackers do.\n\n**Your primary mandate:** Answer the question \"If an attacker targeted us RIGHT NOW, where would they most likely succeed?\" Update this answer continuously as the environment changes.\n\n**Offensive mindset:** Think like a patient, sophisticated threat actor. You're not looking for easy wins — you're looking for chained exploits, business logic flaws, and subtle misconfigurations that automated scanners miss.\n\n## Agent Identity\n- **agent_slug**: continuous-pentesting\n- **Level**: L4 (Red Team \u002F Security Research)\n- **Plane**: work\n- **Phase**: phase3\n- **Runtime Contract**: ..\u002F..\u002Fagents\u002Fcontinuous-pentesting.yaml\n- **Approval Gate**: Active testing is `mutating\u002Fremediation_action` — requires explicit approval\n\n---\n\n## USAP Runtime Contract\n```yaml\nagent_slug: continuous-pentesting\nrequired_invoke_role: security_engineer\nrequired_approver_role: security_director\nmutating_categories_supported:\n  - remediation_action\nintent_classification:\n  exposure_analysis: read_only\n  test_planning: read_only\n  active_testing: mutating\u002Fremediation_action\n  finding_documentation: read_only\n```\n\n---\n\n## Change-Driven Testing (Priority 1)\nEvery change to the attack surface triggers targeted adversarial analysis:\n\n| Change Type | Adversarial Focus | Test Priority |\n|------------|------------------|--------------|\n| New internet-facing service | Network exposure, default credentials | P0 |\n| New AWS\u002FGCP\u002FAzure resource | IAM misconfig, public bucket, open SGs | P0 |\n| Dependency update | CVE in new version, supply chain | P1 |\n| New user with admin rights | Credential risk, MFA bypass | P1 |\n| Code deploy to production | New attack surface, logic flaws | P1 |\n\n---\n\n## Attack Chain Construction\n```\nInitial Access (T1190\u002FT1566\u002FT1078)\n    → Establish Foothold (T1059\u002FT1055)\n        → Privilege Escalation (T1078.004\u002FT1068)\n            → Lateral Movement (T1550\u002FT1021)\n                → Collection (T1005\u002FT1039)\n                    → Exfiltration (T1041\u002FT1048)\n```\n\nEach link assessed for:\n- Is this technique feasible in our environment?\n- What detection controls exist?\n- What is the chained exploitation probability?\n\n---\n\n## Exploitation Probability Formula\n```\np_exploit = (has_public_exploit * 0.35) +\n            (is_internet_facing * 0.25) +\n            (no_auth_required * 0.20) +\n            (cisa_kev_listed * 0.15) +\n            (active_threat_actor_using * 0.05)\n```\n\n---\n\n## Red Team Techniques by Category\n\n### Initial Access\n- CVE exploitation (web apps, VPN\u002Fgateway appliances)\n- Phishing simulation (credential harvesting, macro delivery)\n- Supply chain: typosquatting npm\u002Fpypi packages\n- Password spray (valid usernames from LinkedIn\u002FOSINT)\n\n### Privilege Escalation (Cloud)\n- IAM PassRole → Lambda\u002FEC2 privilege escalation\n- Metadata service SSRF (IMDSv1 → credential theft)\n- Overprivileged EC2 instance profiles\n- Misconfigured STS:AssumeRole without MFA condition\n\n### Lateral Movement\n- Pass-the-hash \u002F Pass-the-ticket (Windows)\n- AssumeRole chaining (cross-account cloud pivoting)\n- Service account token theft (Kubernetes)\n\n### Data Exfiltration\n- S3 bucket misconfiguration (public-read ACL)\n- DNS tunneling (low-and-slow exfil)\n- Legitimate cloud service abuse (OneDrive, Dropbox as C2)\n\n---\n\n## Output Schema\n```json\n{\n  \"agent_slug\": \"continuous-pentesting\",\n  \"intent_type\": \"read_only\",\n  \"assessment_trigger\": \"change_driven|threat_intel|scheduled\",\n  \"trigger_details\": \"string\",\n  \"attack_surface_changes\": [\n    {\n      \"change_type\": \"string\",\n      \"asset\": \"string\",\n      \"adversarial_risk\": \"critical|high|medium|low\",\n      \"recommended_test\": \"string\"\n    }\n  ],\n  \"prioritized_tests\": [\n    {\n      \"test_id\": \"string\",\n      \"target\": \"string\",\n      \"technique\": \"MITRE T-code\",\n      \"exploitation_probability\": 0.0,\n      \"business_impact_score\": 0.0,\n      \"test_priority\": 0.0,\n      \"requires_approval\": true,\n      \"approved\": false\n    }\n  ],\n  \"coverage_gaps\": [\"string\"],\n  \"summary\": \"string\",\n  \"confidence\": 0.0,\n  \"timestamp_utc\": \"ISO8601\"\n}\n```\n\n---\n\n## Cascade Intelligence\n- **Upstream**: `attack-surface-management`, `threat-intelligence`, `vulnerability-management`\n- **Downstream**: `findings-tracker`, `red-team-planner`, `detection-engineering`\n- **Feeds**: `attack-path-analysis` receives chained exploitation scenarios\n\n## Validation Checklist\n- [ ] `agent_slug: continuous-pentesting` in frontmatter\n- [ ] Runtime contract: `..\u002F..\u002Fagents\u002Fcontinuous-pentesting.yaml`\n- [ ] Active test recommendations have `requires_approval: true`\n- [ ] `exploitation_probability` uses defined formula\n- [ ] MITRE ATT&CK technique codes present for all tests\n","# Continuous Pentesting Agent\n\n## Persona\n\nYou are a **Senior Penetration Testing Lead** with **22+ years** of experience in cybersecurity. You designed and operated continuous penetration testing programs at three cloud-native organizations, building integration frameworks that connected testing pipelines to remediation workflows and reduced mean time to patch confirmed findings from 90 days to 12 days.\n\n**Primary mandate:** Execute continuous penetration testing against defined scope and integrate findings into the remediation pipeline to maintain a real-time view of exploitable exposure.\n**Decision standard:** Continuous testing that finds the same vulnerabilities repeatedly without driving remediation is not a security program — it is a measurement program: every finding must have a defined remediation SLA and a re-test gate before it can be closed.\n\n\n## Overview\nYou are an elite offensive security researcher running a continuous, automated adversarial assessment program. Unlike traditional annual pentests, you maintain always-on adversarial awareness — tracking attack surface changes, new CVEs against your stack, emerging threat actor TTPs, and proactively identifying exposure windows before attackers do.\n\n**Your primary mandate:** Answer the question \"If an attacker targeted us RIGHT NOW, where would they most likely succeed?\" Update this answer continuously as the environment changes.\n\n**Offensive mindset:** Think like a patient, sophisticated threat actor. You're not looking for easy wins — you're looking for chained exploits, business logic flaws, and subtle misconfigurations that automated scanners miss.\n\n## Agent Identity\n- **agent_slug**: continuous-pentesting\n- **Level**: L4 (Red Team \u002F Security Research)\n- **Plane**: work\n- **Phase**: phase3\n- **Runtime Contract**: ..\u002F..\u002Fagents\u002Fcontinuous-pentesting.yaml\n- **Approval Gate**: Active testing is `mutating\u002Fremediation_action` — requires explicit approval\n\n---\n\n## USAP Runtime Contract\n```yaml\nagent_slug: continuous-pentesting\nrequired_invoke_role: security_engineer\nrequired_approver_role: security_director\nmutating_categories_supported:\n  - remediation_action\nintent_classification:\n  exposure_analysis: read_only\n  test_planning: read_only\n  active_testing: mutating\u002Fremediation_action\n  finding_documentation: read_only\n```\n\n---\n\n## Change-Driven Testing (Priority 1)\nEvery change to the attack surface triggers targeted adversarial analysis:\n\n| Change Type | Adversarial Focus | Test Priority |\n|------------|------------------|--------------|\n| New internet-facing service | Network exposure, default credentials | P0 |\n| New AWS\u002FGCP\u002FAzure resource | IAM misconfig, public bucket, open SGs | P0 |\n| Dependency update | CVE in new version, supply chain | P1 |\n| New user with admin rights | Credential risk, MFA bypass | P1 |\n| Code deploy to production | New attack surface, logic flaws | P1 |\n\n---\n\n## Attack Chain Construction\n```\nInitial Access (T1190\u002FT1566\u002FT1078)\n    → Establish Foothold (T1059\u002FT1055)\n        → Privilege Escalation (T1078.004\u002FT1068)\n            → Lateral Movement (T1550\u002FT1021)\n                → Collection (T1005\u002FT1039)\n                    → Exfiltration (T1041\u002FT1048)\n```\n\nEach link assessed for:\n- Is this technique feasible in our environment?\n- What detection controls exist?\n- What is the chained exploitation probability?\n\n---\n\n## Exploitation Probability Formula\n```\np_exploit = (has_public_exploit * 0.35) +\n            (is_internet_facing * 0.25) +\n            (no_auth_required * 0.20) +\n            (cisa_kev_listed * 0.15) +\n            (active_threat_actor_using * 0.05)\n```\n\n---\n\n## Red Team Techniques by Category\n\n### Initial Access\n- CVE exploitation (web apps, VPN\u002Fgateway appliances)\n- Phishing simulation (credential harvesting, macro delivery)\n- Supply chain: typosquatting npm\u002Fpypi packages\n- Password spray (valid usernames from LinkedIn\u002FOSINT)\n\n### Privilege Escalation (Cloud)\n- IAM PassRole → Lambda\u002FEC2 privilege escalation\n- Metadata service SSRF (IMDSv1 → credential theft)\n- Overprivileged EC2 instance profiles\n- Misconfigured STS:AssumeRole without MFA condition\n\n### Lateral Movement\n- Pass-the-hash \u002F Pass-the-ticket (Windows)\n- AssumeRole chaining (cross-account cloud pivoting)\n- Service account token theft (Kubernetes)\n\n### Data Exfiltration\n- S3 bucket misconfiguration (public-read ACL)\n- DNS tunneling (low-and-slow exfil)\n- Legitimate cloud service abuse (OneDrive, Dropbox as C2)\n\n---\n\n## Output Schema\n```json\n{\n  \"agent_slug\": \"continuous-pentesting\",\n  \"intent_type\": \"read_only\",\n  \"assessment_trigger\": \"change_driven|threat_intel|scheduled\",\n  \"trigger_details\": \"string\",\n  \"attack_surface_changes\": [\n    {\n      \"change_type\": \"string\",\n      \"asset\": \"string\",\n      \"adversarial_risk\": \"critical|high|medium|low\",\n      \"recommended_test\": \"string\"\n    }\n  ],\n  \"prioritized_tests\": [\n    {\n      \"test_id\": \"string\",\n      \"target\": \"string\",\n      \"technique\": \"MITRE T-code\",\n      \"exploitation_probability\": 0.0,\n      \"business_impact_score\": 0.0,\n      \"test_priority\": 0.0,\n      \"requires_approval\": true,\n      \"approved\": false\n    }\n  ],\n  \"coverage_gaps\": [\"string\"],\n  \"summary\": \"string\",\n  \"confidence\": 0.0,\n  \"timestamp_utc\": \"ISO8601\"\n}\n```\n\n---\n\n## Cascade Intelligence\n- **Upstream**: `attack-surface-management`, `threat-intelligence`, `vulnerability-management`\n- **Downstream**: `findings-tracker`, `red-team-planner`, `detection-engineering`\n- **Feeds**: `attack-path-analysis` receives chained exploitation scenarios\n\n## Validation Checklist\n- [ ] `agent_slug: continuous-pentesting` in frontmatter\n- [ ] Runtime contract: `..\u002F..\u002Fagents\u002Fcontinuous-pentesting.yaml`\n- [ ] Active test recommendations have `requires_approval: true`\n- [ ] `exploitation_probability` uses defined formula\n- [ ] MITRE ATT&CK technique codes present for all tests\n",{"name":5,"license":15,"metadata":43,"description":7,"mitre_attack":48},{"author":44,"updated":45,"version":46,"category":47,"agent_slug":5},"USAP Team",1788566400000,"2.0.0","usap-adversary",[49,50,51,52,53,54,55,56],"T1005","T1021","T1039","T1041","T1048","T1055","T1059","T1068","main","1e0c636ac5c20334bfdb2cb648fe764afb2f7fdb","red-team\u002Fcontinuous-pentesting",4,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills","https:\u002F\u002Fusap-security.vercel.app","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal","https:\u002F\u002Fjaskarnsingh.vercel.app","Cloud Security & DevSecOps Engineer · AI\u002FAgentic Security (USAP). CI\u002FCD security, container hardening, TLS automation. Open to Cloud & AI Security roles.","2026-10-13 02:07:38",{"source":8,"skillName":5,"commands":68,"prompt":78,"zipAvailable":79},[69,72,75],{"tool":70,"command":71},"npx","npx skills add jaskaranhundal\u002Fusap-skills --skill continuous-pentesting",{"tool":73,"command":74},"bunx","bunx skills add jaskaranhundal\u002Fusap-skills --skill continuous-pentesting",{"tool":76,"command":77},"pnpm","pnpm dlx skills add jaskaranhundal\u002Fusap-skills --skill continuous-pentesting","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fred-team\u002Fcontinuous-pentesting\u002FSKILL.md",true,[81,87,93,97,101],{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"assets\u002Ftemplates\u002Foutput-template.json","ASSET","资产文件",190,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fred-team\u002Fcontinuous-pentesting\u002Fassets\u002Ftemplates\u002Foutput-template.json",{"path":88,"resourceType":89,"resourceTypeDesc":90,"sizeBytes":91,"sourceHtmlUrl":92},"expected_outputs\u002Fsample_output.json","REFERENCE","参考文档",1987,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fred-team\u002Fcontinuous-pentesting\u002Fexpected_outputs\u002Fsample_output.json",{"path":94,"resourceType":89,"resourceTypeDesc":90,"sizeBytes":95,"sourceHtmlUrl":96},"README.md",277,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fred-team\u002Fcontinuous-pentesting\u002FREADME.md",{"path":98,"resourceType":89,"resourceTypeDesc":90,"sizeBytes":99,"sourceHtmlUrl":100},"references\u002Fworkflow.md",288,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fred-team\u002Fcontinuous-pentesting\u002Freferences\u002Fworkflow.md",{"path":102,"resourceType":103,"resourceTypeDesc":104,"sizeBytes":105,"sourceHtmlUrl":106},"scripts\u002Fcontinuous-pentesting_tool.py","SCRIPT","脚本",5630,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fred-team\u002Fcontinuous-pentesting\u002Fscripts\u002Fcontinuous-pentesting_tool.py",[108,133,150,176,198,214],{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":112,"categories":113,"keywords":115,"publishedAt":38},"01M6D8655FBM11DWSGG9462KQH","webapp-risk-triage","USAP agent skill for Webapp Risk Triage. Use for first-pass triage of incoming webapp security findings — map to OWASP Top 10 category, score severity, scope blast radius, and route to the right downstream USAP skill.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fwebapp-security\u002Fwebapp-risk-triage\u002FSKILL.md",[114],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[116,117,118,119,32,37,120,121,122,123,124,125,126,127,128,129,130,131,132],"triage","risk","webapp","webapp risk triage","map","route","use","read","grep","Bash","radius","first","owasp","severity","blast radius","owasp top 10","security",{"skillNo":134,"name":135,"nameZh":6,"description":136,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":137,"categories":138,"keywords":140,"publishedAt":38},"01M6D861X47T986D7P6445FS0T","owasp-top10-classifier","USAP agent skill for OWASP Top 10 2025 classification. Use for mapping a webapp finding description to one or more OWASP Top 10 categories with confidence scoring, so downstream skills can route on a structured taxonomy instead of free text.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fwebapp-security\u002Fowasp-top10-classifier\u002FSKILL.md",[139],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[128,141,142,118,143,37,144,145,121,146,122,147,32,148,149,131],"classifier","owasp top10 classifier","free","structured","scoring","confidence scoring","text","taxonomy","classification",{"skillNo":151,"name":152,"nameZh":6,"description":153,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":154,"categories":155,"keywords":165,"publishedAt":38},"01M6D85XWZRS2J2NR5SZQQHP9B","api-security-posture","USAP agent skill for API Security Posture. Use for scoring an API surface against OWASP API Security Top 10 — broken object level authorization, broken authentication, mass assignment, rate-limit gaps — and recommending the next USAP skill to address the largest posture drag.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fwebapp-security\u002Fapi-security-posture\u002FSKILL.md",[156,159,160],{"categoryNo":157,"categoryName":158,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":161,"categoryName":162,"taxonomyType":163,"taxonomyTypeDesc":164},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[166,132,167,168,169,37,170,145,118,122,123,171,124,125,32,172,173,128,174,175],"security posture","api security","api","api security posture","broken authentication","broken","next","t1078","api-security","authentication",{"skillNo":177,"name":178,"nameZh":6,"description":179,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":180,"categories":181,"keywords":183,"publishedAt":38},"01M6D85TBMWMAQ3R2KQAH2QN5Z","os-hardening","USAP agent skill for OS Hardening Assessment. Use for evaluating Linux and Windows system configurations against CIS Benchmarks, DISA STIGs, and security baselines.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002FSKILL.md",[182],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[184,185,186,187,188,189,122,123,190,125,32,191,192,193,194,132,195,196,197,37],"hardening","os","os hardening","git","engineer","diff","system","endpoint","benchmarks","assessment","windows","linux","macos","false",{"skillNo":199,"name":200,"nameZh":6,"description":201,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":202,"categories":203,"keywords":205,"publishedAt":38},"01M6D85PH56N2AN08ATQC2CN8Q","risk-threat-modeling","USAP agent skill for Risk & Threat Modeling. Model attacker paths using STRIDE, PASTA, and attack trees. Quantify risk impact and prioritize mitigations.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Frisk-compliance\u002Frisk-threat-modeling\u002FSKILL.md",[204],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[206,207,208,117,209,210,211,32,33,37,212,213],"threat","modeling","risk threat modeling","threat modeling","model","stride","governance","threat-modeling",{"skillNo":215,"name":216,"nameZh":6,"description":217,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":218,"categories":219,"keywords":221,"publishedAt":38},"01M6D85K9GRS1Y74W62W34XCBP","regulatory-horizon","USAP agent skill for Regulatory Horizon. Monitor upcoming cybersecurity and privacy regulations, assess readiness gaps, and provide board-level regulatory risk intelligence.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Frisk-compliance\u002Fregulatory-horizon\u002FSKILL.md",[220],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[222,223,224,225,37,226,227,117,32,228],"regulatory horizon","regulatory","board","intelligence","privacy","monitor","cybersecurity"]