security-threat-model

Name: security-threat-model
Availability: InStock
Author: Sammykins

Generate a repo-centric threat model document with evidence anchors and Mermaid diagrams.

Updated Oct 31, 2024

Search Tags:#risk-assessment #threat-modeling #appsec #mitigations #repo-evidence #mermaid-diagrams #threat-paths

Ready to run

npx skills add https://github.com/thesammykins/dotfiles --skill security-threat-model-thesammykins

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-threat-model
Source: https://github.com/thesammykins/dotfiles/tree/main/.agents/skills/security-threat-model
Command: npx skills add https://github.com/thesammykins/dotfiles --skill security-threat-model-thesammykins

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Repository-specific threat modeling with evidence-backed claims to anchor security analysis in the codebase, enabling precise risk assessment and targeted mitigations.

Core Features & Use Cases

Repo-grounded threat modeling anchored to repository paths and artifacts.
Identification of trust boundaries, assets, and attacker capabilities with evidence anchors.
Prioritized threats with explicit likelihood/impact and actionable mitigations.
Generated outputs include a compact Mermaid diagram and a structured report aligned with the reference prompt template.

Quick Start

Run the threat-model workflow against the target repository using the provided references/prompt-template to generate a structured threat-model document.

Frequently Asked Questions about security-threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a threat model from my codebase?▼

Generate a threat model from your codebase by running the threat-model workflow against your repository to identify components, entry points, and trust boundaries with explicit evidence anchors. The output is a structured document including prioritized threats, mitigations, and diagrams.

What is repo-grounded threat modeling for application security?▼

Repo-grounded threat modeling anchors security analysis directly in your repository paths and artifacts. It identifies assets, attacker capabilities, and abuse paths to provide precise risk assessment with evidence-backed claims rather than relying on abstract architectural assumptions.

How to identify trust boundaries and entry points for threat modeling?▼

Identify trust boundaries and entry points by analyzing the repository's components and data stores. This Skill maps these security boundaries and provides explicit evidence anchors from repo paths to justify the threat model structure.

Can I generate Mermaid diagrams for threat paths and mitigations?▼

Yes, you can generate Mermaid diagrams for threat paths and mitigations. The Skill produces a compact Mermaid diagram alongside a structured threat model document that outlines validation prompts and actionable security mitigations.

Does qualitative risk assessment work for evaluating application security threats?▼

Qualitative risk assessment works for evaluating application security threats by ranking them using qualitative likelihood and impact. This Skill provides explicit justifications for each threat ranking to ensure targeted and actionable mitigations.

What is the best way to document abuse paths and attacker capabilities?▼

The best way to document abuse paths and attacker capabilities is using a structured prompt template. This approach enumerates threats, ranks them with impact justifications, and outputs a repo-centric document with mitigations and validation prompts.