security-threat-model

A repository-grounded threat model requires evidence from your codebase to enumerate trust boundaries, assets, and abuse paths. This Skill generates a Markdown report detailing prioritized threats and recommended mitigations based on repository evidence.

Repository-grounded threat modeling identifies security risks by enumerating trust boundaries, assets, and attacker capabilities directly from a codebase. It outputs a concise Markdown report requiring user validation of assumptions and evidence from the repository.

This threat modeling approach is suitable for AppSec engineers and security analysts analyzing any repository or project path. It produces a concise Markdown report containing prioritized abuse paths and mitigations tailored to the specific codebase.

Documenting security threats is best achieved by generating a concise Markdown report that details trust boundaries, assets, and prioritized abuse paths. This format ensures the threat model is easy to review, understand, and share with security stakeholders.

Validating assumptions is required when generating a threat model report because the analysis relies on evidence from the repository. User validation ensures the enumerated abuse paths and mitigations accurately reflect the project's security posture.