Public catalog

Public skill

security-threat-model

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

Approved release

Package contents

Manifest

5 files

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

Manifest SHA-2566499654233467b1f0280f8fe2eba62a0e81b3119d46fcdfcad7bdfdfbca0b547
  • LICENSE.txt10,776 bytes
  • SKILL.md5,561 bytes
  • agents/openai.yaml254 bytes
  • references/prompt-template.md12,642 bytes
  • references/security-controls-and-assets.md1,680 bytes

Release history

Public versions