# Cybersecurity Superpowers — Loom Demo Script

**Duration**: 2-3 minutes
**Presenter**: Project maintainer / contributor
**Target Audience**: Developers, security engineers, DevSecOps teams

---

## [0:00 - 0:20] Intro

"Hi everyone! Today I'm excited to walk you through Cybersecurity Superpowers — an open-source collection of agent skills designed to bring cybersecurity expertise directly into your development workflow.

Whether you're using OpenCode, Claude Code, or just bash, this project gives you immediate access to best-practice security tooling."

---

## [0:20 - 0:45] What It Is

"This project packages six cybersecurity skills into a single, composable pipeline:

- Threat-modeling with STRIDE and CVSS scoring
- Secure-coding checklists for JavaScript, TypeScript, Python, Go, and Rust
- Static analysis with SARIF and JSON output
- Penetration testing with MITRE ATT&CK and OWASP WSTG mapping
- Incident response playbooks aligned to NIST SP 800-61
- Supply-chain security with SBOM generation

Each skill is a self-contained directory with a SKILL.md, run scripts, and configuration files."

---

## [0:45 - 1:30] Demo Walkthrough — Single Skill

"Let me show you how it works. I'll navigate to the project directory and run the threat-modeling skill against a sample app:

```
cd CyberSecurity-Superpowers
bash skills/cybersecurity/threat-modeling/run.sh --project "Demo App" --output-dir artifacts/reports
```

This generates a complete STRIDE threat model with CVSS scores, mitigation recommendations, and references to OWASP and NIST standards."

---

## [1:30 - 2:00] Demo Walkthrough — Orchestrator

"Now let's run the full orchestrator, which chains multiple skills together:

```
bash scripts/run-orchestrator.sh full "Demo App"
```

The orchestrator runs each skill sequentially — threat modeling, secure coding, static analysis, penetration testing, and incident response. It produces reports in `artifacts/reports/`. This is perfect for CI/CD pipelines or pre-release security gates."

---

## [2:00 - 2:30] Outro

"The project is fully open source under the MIT license. We have good first issues tagged for new contributors, comprehensive documentation, and community-driven development.

If you find this useful, please:

- Star the repository on GitHub
- Check out the contributing guide
- Join the community discussions

Secure development shouldn't be hard. With Cybersecurity Superpowers, it just got a whole lot easier.

Thanks for watching!"

---

## End Screen Text

**GitHub**: https://github.com/rohit-barui/CyberSecurity-Superpowers
**License**: MIT
**Tags**: #Cybersecurity #DevSecOps #OpenSource