skills.rest
mindfortai
mindfortaiOFFICIAL
Explore all skills by this author →
WebsiteGitHub

threat-model

Generate a professional threat model HTML report from repository evidence.

16|2|Updated May 26, 2026
Search Tags:#threat modeling#repository analysis#application security#security assessment#HTML report
One-click install
npx skills add https://github.com/mindfortai/security-skills --skill threat-model-mindfortai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-model
Source: https://github.com/mindfortai/security-skills/tree/main/skills/threat-model
Command: npx skills add https://github.com/mindfortai/security-skills --skill threat-model-mindfortai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the generation of comprehensive application security threat models, saving time and reducing manual errors in identifying security risks.

Core Features & Use Cases

  • Threat Modeling: Automatically creates a professional HTML report that details the potential security risks and vulnerabilities in an application.
  • Repository Analysis: Utilizes repository evidence to understand the system's architecture, trust boundaries, and data flows.
  • Customizable Reports: Generates a standalone HTML report with a customizable structure and content.

Quick Start

Run the 'threat-model' skill on your repository to automatically generate a threat model report.

Frequently Asked Questions about threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a threat model from repository code automatically?▼

To generate a threat model automatically, you run the skill directly on your repository. It analyzes code, configuration, and documentation to produce a professional standalone HTML report detailing security risks and attack surfaces.

What is application security threat modeling based on repository evidence?▼

Application security threat modeling based on repository evidence is the process of analyzing source code and configurations to identify potential vulnerabilities. It extracts system architecture and data flows directly from your codebase.

How do I automate an application security assessment for my codebase?▼

You automate an application security assessment by running the threat-model skill on your repository. It evaluates code and configuration files to map trust boundaries and data flows, outputting an HTML report.

Can I customize the HTML report generated for my threat model?▼

Yes, the generated threat model HTML report is standalone and customizable. You can modify the report structure and content to fit your specific application security assessment requirements.

Does threat modeling work without external dependencies or configuration files?▼

Threat modeling requires analyzing your repository's code, configuration, and documentation to accurately map system architecture and trust boundaries. Without these repository elements, it cannot identify potential vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
mkikenmkiken
1

prompt-self-improvement

Analyze AI assistant prompts and propose evidence-based improvements.

Community
Advanced
greyhaven-aigreyhaven-ai
29

Security Analysis Skill

Identify security vulnerabilities in software systems and generate remediation reports.

Community
Advanced
outfitter-devoutfitter-dev
28

security-engineering

Audit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.

Official
Advanced
AgentSecOpsAgentSecOps
183

pytm

Generate STRIDE-based threat models and reports from Python code with pytm and Graphviz.

Official
Advanced