threat-model

Attack vectors, detection strategies, and mitigations for malicious AI agent skills.

Content Preview
# Threat Model: AI Agent Skills

Attack vectors, detection strategies, and mitigations for malicious AI agent skills.

## Table of Contents

- [Attack Surface](#attack-surface)
- [Threat Categories](#threat-categories)
- [Attack Vectors by Skill Component](#attack-vectors-by-skill-component)
- [Known Attack Patterns](#known-attack-patterns)
- [Detection Limitations](#detection-limitations)
- [Recommendations for Skill Authors](#recommendations-for-skill-authors)

---

## Attack Surface

AI agent
How to Use

Recommended: Install to project (local)

mkdir -p .claude/skills
curl -o .claude/skills/threat-model.md \
  https://raw.githubusercontent.com/alirezarezvani/claude-skills/main/engineering/skill-security-auditor/references/threat-model.md

Skill is scoped to this project only. Add .claude/skills/ to your .gitignoreif you don't want to commit it.

Alternative: Clone full repo

git clone https://github.com/alirezarezvani/claude-skills

Then reference at engineering/skill-security-auditor/references/threat-model.md

Related Skills