Analyze a codebase and generate a structured threat model document.
npx skills add https://github.com/tobihagemann/turbo --skill create-threat-model
Please help me install this Agent Skill. Skill: create-threat-model Source: https://github.com/tobihagemann/turbo/tree/main/skills/create-threat-model Command: npx skills add https://github.com/tobihagemann/turbo --skill create-threat-model
This Skill automates the process of analyzing a codebase to identify potential security risks, assets, trust boundaries, and attack surfaces, producing a structured threat model document.
Use the create-threat-model skill to analyze the current codebase and produce a threat model.
High-intent search queries and answers about installing and using this skill.
A threat model for a codebase identifies security-sensitive operations, trust boundaries, and attack surfaces, then documents potential vulnerabilities and attacker stories to help security teams prioritize remediation efforts before deployment.
A codebase threat model document includes identified assets, trust boundaries, attack surfaces, existing mitigations, attacker stories, and calibrated severity ratings based on security-relevant code discovered during reconnaissance.
Automated threat modeling adapts to different project sizes by calibrating the depth of its reconnaissance and security-relevant code discovery, ensuring the four-section threat model matches the specific scope of the analyzed codebase.
Yes, you can use this threat model skill for a new microservice deployment to scan the code, identify potential vulnerabilities, and produce a structured document that helps your security team understand risks and prioritize remediation.
You do not need any external dependencies to run this codebase security analysis, as the skill operates independently to perform reconnaissance and generate the threat model without requiring additional packages.
securityreviewaiAnalyzes Git repositories to produce summaries of their structure, risks, and key components.
skeletorfletAnalyze dependencies, secrets, and code patterns to generate prioritized vulnerability reports.
RooseveltAdvisorsAutomate web application security assessments and generate prioritized penetration testing plans.
shalevaminGenerate repository-grounded Markdown threat models with trust boundaries and abuse paths.
