Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security testing, penetration testing, and compliance checking.
| Date | Stars |
|---|---|
| 2026-07-31 | 326 |
| 2026-08-03 | 326 |
| 2026-08-13 | 330 |
| 2026-08-18 | 333 |
| 2026-08-20 | 335 |
| 2026-08-26 | 336 |
| 2026-08-28 | 337 |
| 2026-08-31 | 338 |
| 2026-09-01 | 339 |
| 2026-09-02 | 341 |
| 2026-09-03 | 341 |
| 2026-09-06 | 341 |
| 2026-09-08 | 343 |
| 2026-09-11 | 342 |
| 2026-09-14 | 343 |
| 2026-09-15 | 344 |
| 2026-09-17 | 343 |
| 2026-09-18 | 343 |
| 2026-09-20 | 343 |
Today
— stars today
This week
+1 stars this week
This month
+8 stars this month
Momentum
0.0
growth rate 0.29%/day
<!-- Threat Modeling Skill | Version 3.2.0 (20260512a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
# Threat Modeling Skill v3.2.0
AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security analysis, security audit, and penetration testing.
## What's New in v3.2.0
- **Tool-assisted analysis**: Integrated Luoshu (14 MCP), Ghidra (18 MCP), CodeQL (65 MCP), Joern (15 CWE queries) for deep code and binary analysis
- **Complex system support**: DFD auto-generation, CFG/DFG analysis, N-hop call chain tracing, semantic code search
- **Binary reverse engineering**: Ghidra decompilation, radare2 recon, call graphs and cross-references
- **Automated vulnerability detection**: Joern CWE queries for C/C++, CodeQL security suites
- **Attack chain verification**: Luoshu call chains + Ghidra decompilation + Joern taint analysis
- **Explicit phase validation**: Replaced hook-based validation with portable `--phase-end` calls
- **Tool capabilities matrix**: New `knowledge/tool-capabilities.yaml` for runtime tool discovery
- 3 new reference documents in `references/` for on-demand tool guidance
- agentskills.io multi-agent platform compatibility (Claude Code, Codex CLI, IDE extensions)
See [CHANGELOG.md](CHANGELOG.md) for full version history.
## What's New in v3.0.2
- Major system architecture refactoring, improved security analysis depth and path coverage
- Backported SM2 state machine from next-gen AI-Native penetration testing system named "Cobweb" for problem-solving in depth
- Added multi-version task history and precise structured phase outputs for CI/CD integration
- Optimized context engineering and data disclosure, ~35% token reduction
See [CHANGELOG.md](CHANGELOG.md) for full version history.
## Installation
### Option 1: Global Installation (Recommended)
```bash
# Clone to global skills directory
git clone https://github.com/fr33d3m0n/threat-modeling.git \
~/.claude/skills/threat-modeling
```
### Option 2: Project-Local Installation
```bash
# Clone to project's .claude/skills directory
mkdir -p .claude/skills
git clone https://github.com/fr33d3m0n/threat-modeling.git \
.claude/skills/threat-modeling
```
### Requirements
- Claude Code CLI
- Python 3.10+
- SQLite3 (for knowledge base queries)
## Quick Start
1. **Start Claude Code** in your target project directory:
```bash
cd /path/to/your/project
claude
```
2. **Invoke the skill** with a simple prompt:
```
/threat-modeling Perform a complete threat model analysis on @.
```
3. **Follow the 8-phase workflow** - Claude will guide you through each phase.
## Usage Modes
The skill supports **6 flexible application modes** beyond the standard 8-phase workflow:
### Mode 1: Complete Workflow (Standard)
Full 8-phase threat modeling for codebases.
```
/threat-modeling Perform a complete threat model analysis on @/path/to/project
Project context:
- This is an e-commerce platform backend API service
- Built with Django REST Framework
- User data includes PII and payment information
Focus areas: Authentication mechanisms, payment flow, API security
```
### Mode 2: Knowledge Base Consultation
Use as security consulting resource without executing complete workflow.
```
Query complete information for CWE-89 (SQL Injection),
including attack patterns, testing methods, and mitigations
```
**Response includes**: CWE overview, related CAPEC patterns, WSTG testing steps, ASVS requirements, mitigation examples.
### Mode 3: Deep Vulnerability Analysis
In-depth analysis of specific vulnerabilities or code snippets.
```
Analyze SSRF risk in this code, construct attack path and design POC
[Code snippet]
```
**Response includes**: Vulnerability mechanism, attack path, POC design, CWE/CAPEC/ATT&CK mapping.
### Mode 4: Security Test Generation
Generate test cases based on security standards.
```
Generate WSTG-based security tesExcerpt of 13,665 characters
Read on GitHubWould you bet a product on this? Bounded 0–100 and slow moving.
matched fp:4e97a08710ff67ea, llm:description: 'AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security testing, penetration testing, and compliance checking.'
matched fp:4e97a08710ff67ea, llm:description: 'AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security testing, penetration testing, and compliance checking.'
matched fp:4e97a08710ff67ea, llm:description: 'AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security testing, penetration testing, and compliance checking.'