security-threat-model

Generate a repo-grounded threat model by providing a repository path to enumerate trust boundaries, assets, and abuse paths anchored to architectural evidence. The tool analyzes codebase interactions to produce a structured threat model with mitigations and a Mermaid diagram.

Repo-grounded threat modeling anchors architectural claims to specific repository paths and component interactions. It enumerates trust boundaries, attacker capabilities, and abuse paths to produce an evidence-backed risk analysis narrative directly from the codebase.

Yes, you can provide optional in-scope paths alongside the repository path to generate an evidence-grounded threat model for a specific scope. This narrows the risk analysis to targeted components and their architectural interactions.

Document trust boundaries and attacker capabilities by mapping architectural claims to repository evidence. This produces a concise markdown threat model with a structured table and a compact Mermaid diagram for review and remediation planning.

Yes, the threat modeling skill operates without external dependencies or components. It directly analyzes your repository structure to extract architectural context and tie risk analysis claims to concrete codebase evidence.

The threat model output is a markdown document suitable for review and remediation planning. It includes a structured threat-model table tying architectural claims to repo paths, plus a compact Mermaid diagram illustrating the architecture.