skills.rest
aaymanasrar
aaymanasrarCOMMUNITY
Explore all skills by this author →
GitHub

security-threat-model

Generate a detailed threat model for a codebase path with trust boundaries and mitigations.

Updated Mar 17, 2026
Search Tags:#threat modeling#security review#AppSec#attack surface#repository security
One-click install
npx skills add https://github.com/aaymanasrar/Elephante --skill security-threat-model-aaymanasrar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-threat-model
Source: https://github.com/aaymanasrar/Elephante/tree/main/.agents/skills/security-threat-model
Command: npx skills add https://github.com/aaymanasrar/Elephante --skill security-threat-model-aaymanasrar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for a precise and specific threat model that can enumerate and prioritize potential security threats for a given repository.

Core Features & Use Cases

  • Repository-Grounded Threat Modeling: Generates a threat model specific to the repository, with a focus on trust boundaries, assets, attacker capabilities, and mitigations.
  • Customizable Prompting: Uses a detailed prompt template to guide the process, allowing users to specify context and in-scope paths.
  • Quality Check: Ensures all discovered entrypoints are covered, trust boundaries are represented in threats, and user clarifications are reflected.
  • Mitigation Recommendations: Provides recommended mitigations for high and critical threats, along with detection and monitoring ideas.

Quick Start

Generate a threat model for the codebase at path '/path/to/repo' using the provided prompt and scope.

Frequently Asked Questions about security-threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a threat model for my codebase?▼

Threat modeling for application security involves enumerating trust boundaries, assets, and attacker capabilities to uncover prioritized abuse paths. This process produces actionable threats and recommended mitigations specific to your repository's codebase.

How do I identify attack surfaces and prioritize abuse paths in a repository?▼

Identify attack surfaces and prioritize abuse paths by analyzing codebase evidence and mapping entrypoints against trust boundaries. This generates a prioritized list of security threats and recommended mitigations for high-risk vulnerabilities.

Can I customize the scope and context of a repository security review?▼

Yes, you can customize the repository security review scope by defining specific codebase paths and context within the prompt template. This ensures the threat model accurately reflects user clarifications and focuses on relevant attack surfaces.

What is included in an AppSec threat model's mitigation recommendations?▼

An AppSec threat model's mitigation recommendations include actionable fixes for high and critical threats, alongside detection and monitoring ideas. A quality check ensures all entrypoints are covered and trust boundaries are represented within the threats.

Does the threat modeling process verify that all entrypoints are covered?▼

Yes, the threat modeling process includes a quality check verifying that all discovered entrypoints are covered and trust boundaries are represented in the threats. This ensures the repository threat model remains comprehensive and actionable.

Related Skills

Explore More Software Engineering Skills→
Moliboy5000Moliboy5000

security-threat-model

Generate repository-grounded Markdown threat models with trust boundaries and abuse paths.

Community
Advanced
emilneuraz-aiemilneuraz-ai

stride-analysis-patterns

Identify STRIDE threats in system designs during threat modeling sessions.

Community
Advanced
not-subhunot-subhu

security-scan

Orchestrate dependency audits, static application security testing, and privacy dataflow analysis.

Community
Advanced
SensLiaoSensLiao

security-response-red-purple-team

Map project attack surfaces to MITRE ATT&CK and ATLAS techniques.

Community
Advanced