skills.rest
Renzo-Tognella
Renzo-TognellaCOMMUNITY
Explore all skills by this author →
GitHub

security-threat-model

Enumerate trust boundaries, assets, and attacker capabilities from repository content.

Updated Apr 26, 2026
Search Tags:#risk assessment#code security#appsec#repository analysis#security threat modeling
One-click install
npx skills add https://github.com/Renzo-Tognella/UniversalThingsForMyAgents --skill security-threat-model-renzo-tognella
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-threat-model
Source: https://github.com/Renzo-Tognella/UniversalThingsForMyAgents/tree/main/skills/security-threat-model
Command: npx skills add https://github.com/Renzo-Tognella/UniversalThingsForMyAgents --skill security-threat-model-renzo-tognella

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the creation of comprehensive security threat models, focusing on enumerating trust boundaries, assets, attacker capabilities, abuse paths, and mitigations specific to a repository.

Core Features & Use Cases

  • Repository-specific Threat Modeling: Custom threat models grounded in a code repository.
  • Prioritized Abuse Paths: Identifies attacker goals and impact assessment for security risk.
  • Mitigation Recommendations: Suggests specific mitigations based on threat modeling results.
  • Use Case: Utilize this Skill when conducting security analysis of a codebase to quickly identify critical risks and potential mitigation strategies.

Quick Start

Trigger the security threat model skill for a codebase by prompting: "Please perform a security threat model for the repository located at <path>."

Frequently Asked Questions about security-threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a security threat model for a specific code repository?▼

To generate a security threat model, trigger the analysis by providing the repository path. The model then enumerates trust boundaries, assets, and attacker capabilities to deliver context-specific abuse paths and mitigations.

What is repository-focused threat modeling and how does it identify abuse paths?▼

Repository-focused threat modeling analyzes codebase content to enumerate trust boundaries and attacker capabilities. It identifies prioritized abuse paths by assessing attacker goals and potential security impacts specific to the repository's architecture.

Can I perform an AppSec risk assessment directly on my codebase?▼

Yes, you can perform an AppSec risk assessment by running the threat model skill against your local repository path. It provides evidence-backed security analysis by utilizing repository content to identify critical risks.

Does this security threat modeling approach provide specific mitigation recommendations?▼

Yes, the security threat modeling approach suggests specific mitigations based on the identified threat modeling results. It delivers prioritized abuse paths alongside recommended actions grounded in the repository's context.

Do I need external dependencies to perform code security analysis with this tool?▼

No external dependencies are required to perform code security analysis. The skill operates independently using internal scripts and references to evaluate repository content and generate the threat model.

What is the best way to enumerate trust boundaries and assets in a codebase?▼

The best way to enumerate trust boundaries and assets is to use an in-depth repository-focused threat model. It specifically extracts and evaluates these elements from the codebase to provide evidence-backed security analysis.

Related Skills

Explore More Software Engineering Skills→
googlegoogle
731

mantis-summarize

Generate security-focused directory summaries via bottom-up repository traversal.

Official
Intermediate
aaymanasraraaymanasrar

security-threat-model

Generate a detailed threat model for a codebase path with trust boundaries and mitigations.

Community
Advanced
JFrangelJFrangel

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Community
Advanced
openaiopenai
24.7k

security-threat-model

Generate repository-grounded Markdown threat models with trust boundaries and abuse paths.

Official
Advanced