security-threat-model

Generate a threat model from your codebase by running the threat-model workflow against your repository to identify components, entry points, and trust boundaries with explicit evidence anchors. The output is a structured document including prioritized threats, mitigations, and diagrams.

Repo-grounded threat modeling anchors security analysis directly in your repository paths and artifacts. It identifies assets, attacker capabilities, and abuse paths to provide precise risk assessment with evidence-backed claims rather than relying on abstract architectural assumptions.

Identify trust boundaries and entry points by analyzing the repository's components and data stores. This Skill maps these security boundaries and provides explicit evidence anchors from repo paths to justify the threat model structure.

Yes, you can generate Mermaid diagrams for threat paths and mitigations. The Skill produces a compact Mermaid diagram alongside a structured threat model document that outlines validation prompts and actionable security mitigations.

Qualitative risk assessment works for evaluating application security threats by ranking them using qualitative likelihood and impact. This Skill provides explicit justifications for each threat ranking to ensure targeted and actionable mitigations.

The best way to document abuse paths and attacker capabilities is using a structured prompt template. This approach enumerates threats, ranks them with impact justifications, and outputs a repo-centric document with mitigations and validation prompts.