security-threat-model

What problem does it solve?

This Skill helps security engineers generate a repo-grounded threat model anchored to concrete evidence in the codebase, enabling precise risk analysis and focused reviews.

Core Features & Use Cases

• Evidence-backed modeling: anchors architectural claims to repo paths, code, and configuration evidence.
• Comprehensive threat coverage: enumerates assets, trust boundaries, attacker capabilities, abuse paths, mitigations, and residual risks.
• Structured outputs: produces threat matrices, prioritized risks, and focused recommendations for manual review.
• Targeted scopes: suitable for evaluating a repository or in-scope code paths, with explicit assumptions and open questions.

Quick Start

To begin, trigger the threat-model process for a repository or sub-path, ensuring you provide scope and any known constraints. Example: run threat-model on the root of the project to generate the initial assessment.