discover

Automating infrastructure component discovery involves scanning codebases to identify components, trust boundaries, and data flows. This Skill automates that process by classifying components and storing them as graph structures for threat modeling analysis.

Yes, executing automated codebase scanning requires the infrastructure-scout agent and the threat-modeler agent. These dependencies are necessary to perform the component discovery, classification, and validation logic required for the workflow.

Storing discovered infrastructure components as graph structures is ideal for security analysis. This approach captures components, boundaries, and data flows in a format that supports better threat modeling and relationship mapping.

Yes, you can scan a specific directory path to discover trust boundaries and data flows. By specifying a scope path, the Skill targets the codebase directory and automates the discovery of infrastructure components within that boundary.

Using JavaScript modules for infrastructure discovery limits domain-specific logic execution to JavaScript environments. The Skill relies on these executable modules to process codebase scans, meaning environments without JavaScript support cannot run the discovery workflows.