skills.rest
northseadl
northseadlCOMMUNITY
Explore all skills by this author →
GitHub

security-threat-model

Generate repository-grounded threat models identifying trust boundaries, assets, and abuse paths.

Updated Feb 3, 2026
Search Tags:#code analysis#security#threat modeling#risk assessment#appsec#abuse paths
One-click install
npx skills add https://github.com/northseadl/skillwisp --skill security-threat-model-northseadl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-threat-model
Source: https://github.com/northseadl/skillwisp/tree/main/skills/%40openai/security-threat-model
Command: npx skills add https://github.com/northseadl/skillwisp --skill security-threat-model-northseadl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the generation of repository-grounded threat models, identifying trust boundaries, assets, attacker capabilities, abuse paths, and mitigations to enhance application security.

Core Features & Use Cases

  • Repository-Specific Threat Modeling: Generates threat models tailored to the codebase, not generic checklists.
  • Abuse Path Enumeration: Identifies concrete attack paths and prioritizes them based on likelihood and impact.
  • Mitigation Recommendations: Suggests specific security controls and implementation hints.
  • Use Case: When developing a new microservice, use this Skill to proactively identify potential security vulnerabilities and design secure-by-default components before deployment.

Quick Start

Use the security-threat-model skill to generate a threat model for the current codebase.

Frequently Asked Questions about security-threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a threat model from my existing codebase?▼

This Skill automates threat modeling by analyzing your codebase structure to identify trust boundaries, assets, attacker capabilities, and abuse paths, producing a repository-grounded security assessment.

What is repository-grounded threat modeling and how does it work?▼

Repository-grounded threat modeling scans your codebase to identify trust boundaries, assets, and abuse paths, delivering tailored mitigation recommendations rather than generic security checklists.

Can I use this for proactive AppSec risk assessment on a new microservice?▼

Yes, this Skill supports proactive AppSec risk assessment for new microservices, identifying potential vulnerabilities and recommending specific security controls to design secure-by-default components before deployment.

How do I enumerate concrete abuse paths and prioritize security threats?▼

This Skill enumerates concrete abuse paths by analyzing attacker capabilities against your codebase, then prioritizes identified threats based on their likelihood and potential impact for security review.

Does this threat modeling approach provide specific mitigation recommendations?▼

Yes, this threat modeling approach provides specific mitigation recommendations and implementation hints for security controls, while also providing focus paths for targeted security review.

Related Skills

Explore More Software Engineering Skills→
fimokleifimoklei
41

security-threat-model

Generate Markdown threat models from repository code analysis.

Community
Advanced
koki3141koki3141
2

security-threat-model

Generate a repository-grounded threat model with trust boundaries, assets, and mitigations.

Community
Advanced
DevHive1DevHive1
18

security_scan

Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.

Community
Advanced
Sumeet138Sumeet138
1

security-requirement-extraction

Translate threat models into security requirements with IDs, priorities, and traceability.

Community
Advanced