praneethkukunuru/.agents/skills/hephaestus-threat-surface-sync
.agents/skills/hephaestus-threat-surface-sync/SKILL.md
# hephaestus-threat-surface-sync Use this skill to keep trust boundaries and threat assumptions aligned with spec/plan changes. ## Purpose Persist architecture/security surface deltas as structured DB memory for later verification and review. ## Master Directive This skill MUST follow `.hephaestus/prompts/master-agent-directive.md`. This skill MUST follow `.hephaestus/prompts/db-navigation-contract.md`. This skill MUST follow `.hephaestus/prompts/security-review-contract.md`. ## Use When
development
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add praneethkukunuru/synq-test-103 .agents/skills/hephaestus-threat-surface-syncInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:57 PM1.8s1 file scanned
SKILL.md
hephaestus-threat-surface-sync
Use this skill to keep trust boundaries and threat assumptions aligned with spec/plan changes.
Purpose
Persist architecture/security surface deltas as structured DB memory for later verification and review.
Master Directive
This skill MUST follow .hephaestus/prompts/master-agent-directive.md.
This skill MUST follow .hephaestus/prompts/db-navigation-contract.md.
This skill MUST follow .hephaestus/prompts/security-review-contract.md.
Use When
hephaestus-spec-planintroduces interface or boundary changes.system_architectorhephaestus-security-auditneeds boundary drift sync.
Inputs
- spec diff
- plan diff
- interface/subsystem change list
Outputs
- updated
trust_boundaries,authz_surfaces,threat_assumptions - boundary-delta retrieval chunk
- blocker when boundary risk is unresolved
Procedure
- Locate changed trust/auth/data boundaries from spec/plan deltas.
- Map boundary changes to OWASP A01/A06 risks.
- Persist threat assumptions and authz surface records.
- Emit boundary-delta chunk and blocker when unresolved.
Guardrails
- No new interface/boundary without threat rationale.
- No unresolved boundary drift passed to execute stage.
- Keep records concise and traceable.
Handoff
Include:
- Updated boundary records
- OWASP mapping for changed surfaces
- Required follow-up owner and stage
Related Skills
praneethkukunuru/system_architect
content-media
VerifiedTrustedCommunity
Design correctness and implementation drift owner
SKILL.mdUpdated Apr 16, 2026
praneethkukunuru/scrum_master
tools
VerifiedTrustedCommunity
Stage readiness and artifact completeness owner
SKILL.mdUpdated Apr 16, 2026
praneethkukunuru/roadmap_advisor
tools
VerifiedTrustedCommunity
Roadmap Advisor
SKILL.mdUpdated Apr 16, 2026
praneethkukunuru/reviewer
testing
VerifiedTrustedCommunity
Correctness, security, and maintainability owner
SKILL.mdUpdated Apr 16, 2026