使用方法
- 复制安装命令，在自己的智能体环境安装前先检查源码包。
- 从原始文档核对所需工具、凭据和支持的宿主。
- 说明输入材料与期望交付物，并对照来源检查输出。
npx skills add https://github.com/yogsoth-ai/de-anthropocentric-research-engine --skill map-threat-surface开始前需了解
- 安装不包含模型订阅、API 额度或访问文件的权限。
- 仓库星数和安装量反映活跃情况，不等于独立质量或安全测试。
仓库原始内容
按源仓库内容呈现，保留标题、案例、代码、表格、链接以及原文引用的演示图片。
map-threat-surface
Purpose
Enumerate attackable dimensions of an artifact and rate exposure and accessibility.
Input contract
yaml
required: [artifact, threat_model, access_context]
optional: [asset_inventory, severity_scale]
constraints: [surface dimensions, access assumptions, and rating anchors must be explicit]Procedure
- Inventory components, interfaces, assumptions, and exposed data.
- Enumerate attackable dimensions and access paths.
- Rate exposure/accessibility and record untested surfaces.
Output contract
yaml
produces: [threat_surface, access_map, exposure_ratings, untested_surfaces]
delta_fields: [findings, evidence_updates, uncertainties, decisions, open_questions]Quality gates
- Each surface has an artifact location, access assumption, exposure rating, and rationale.
Failure and counterexamples
Do not infer low exposure from absence of an observed attack; mark untested instead.
Provenance map
- resolved: threat-surface-mapping
