security-threat-model

Name: security-threat-model
Availability: InStock
Author: Keni

Generate repository-grounded threat models with risk tables and Mermaid diagrams.

1|Updated Mar 27, 2026

Search Tags:#risk-assessment #threat-modeling #appsec #trust-boundaries #repo-evidence #abuse-paths

Ready to run

npx skills add https://github.com/devkeni/Skills --skill security-threat-model-devkeni

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-threat-model
Source: https://github.com/devkeni/Skills/tree/main/security/security-threat-model
Command: npx skills add https://github.com/devkeni/Skills --skill security-threat-model-devkeni

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Generates a repository-grounded threat model tailored for AppSec reviews, anchored to evidence within the codebase.

Core Features & Use Cases

Aligns threats with trust boundaries, assets, and attacker capabilities for a given repository or path.
Produces prioritized abuse-path scenarios, mitigations, and a compact, evidence-backed report.
Suitable for security analyses, design reviews, and incident investigations of software projects.

Quick Start

Provide a repository context and scope, then generate a threat model with concrete entry points, assets, and mitigations.

Frequently Asked Questions about security-threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a threat model from my code repository?▼

To generate a threat model from your code repository, provide the repository context and scope. The analysis identifies assets, trust boundaries, and abuse paths, outputting a structured report with a risk table and Mermaid diagram.

What is repository-grounded AppSec threat modeling?▼

Repository-grounded AppSec threat modeling is a security analysis technique that anchors identified threats, attacker capabilities, and mitigations directly to evidence within your codebase rather than relying on theoretical architecture diagrams.

Can I use this threat modeling approach for architecture reviews and incident investigations?▼

Yes, you can use this threat modeling approach for architecture reviews and incident investigations. It scopes the analysis to specific project paths to identify entry points, assets, and concrete mitigations.

How do I map trust boundaries and abuse paths in my application?▼

To map trust boundaries and abuse paths, the analysis aligns detected attacker capabilities with repository evidence. It produces prioritized abuse-path scenarios and concrete mitigations mapped to the identified edges and assets.

What is the best way to visualize security risks in a codebase?▼

The best way to visualize security risks in a codebase is to generate a compact Mermaid diagram. This diagram is included in a structured report alongside a risk table and prioritized threats anchored to your repository evidence.

Does repository-grounded threat modeling require external dependencies or components?▼

No, repository-grounded threat modeling requires no external dependencies or components. You simply provide the repository context or project path to start the AppSec risk assessment and generate the evidence-backed report.

Avi977

security-threat-model

A concise, searchable, and standardized solution-catalog for your business needs. It aggregates your SaaS, simplifies your search, and accelerates your path to answers and tools. It's your one-stop-shop for navigating complexity with clarity and precision.

Community

Advanced