skills.rest
ricardohg1998-create
ricardohg1998-createCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

threat-model-owasp-hardening

Create threat models and security checklists for authenticated SaaS/CRM applications.

Updated Feb 3, 2026
Search Tags:#documentation#authorization#OWASP#risk-assessment#threat-modeling#auth#security-hardening
One-click install
npx skills add https://github.com/ricardohg1998-create/Plantilla-repo --skill threat-model-owasp-hardening
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-model-owasp-hardening
Source: https://github.com/ricardohg1998-create/Plantilla-repo/tree/main/.agent/skills/threat-model-owasp-hardening
Command: npx skills add https://github.com/ricardohg1998-create/Plantilla-repo --skill threat-model-owasp-hardening

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables teams to create a lightweight threat model and a security checklist for applications, identifying risks early and guiding mitigations.

Core Features & Use Cases

  • Lightweight threat modeling for authenticated apps and SaaS/CRM contexts.
  • Generates threat model documentation and a security checklist, plus mitigations and tests.
  • Use Case: Before shipping a feature, run threat-model-owasp-hardening to produce docs, implement mitigations, and verify boundary enforcement.

Quick Start

Run the threat-model-owasp-hardening skill on the target project to generate docs/threat_model.md and docs/security_checklist.md. Implement the recommended mitigations and tests, and review the resulting documentation for completeness.

Frequently Asked Questions about threat-model-owasp-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a threat model for a SaaS application?▼

A security checklist for authenticated apps identifies risks like object access, CSRF, and insecure webhooks, then defines mitigations and tests to verify boundary enforcement. It generates docs/security_checklist.md to guide implementing security hardening before shipping features.

What is the best way to mitigate object access and privilege escalation risks?▼

The best way to mitigate object access and privilege escalation risks is running a threat modeling pass that identifies these vulnerabilities and automatically implements mitigations with tests. This enforces boundaries directly in your authenticated app or CRM environment.

Does threat modeling help prevent tenant leakage in multi-tenant SaaS?▼

Yes, you can use threat modeling for CRM environments by identifying risks like insecure webhooks and object access, then producing a security checklist with mitigations. The process generates docs and adds tests to verify boundary enforcement in authenticated CRM contexts.

How do I document OWASP security hardening mitigations?▼

Document OWASP security hardening mitigations by generating docs/threat_model.md and docs/security_checklist.md files. These documents capture identified risks, outline the implemented mitigations, and record tests added to verify boundary enforcement for authenticated apps.

Related Skills

Explore More Software Engineering Skills→
YSheldonYSheldon

threat_modeling

Generate a formal threat_model.md by enumerating assets, trust boundaries, and STRIDE categories.

Community
Advanced
zebbernzebbern
4.5k

Security Scanning Tools

Automate security scanning workflows for network and vulnerability assessment.

Community
Advanced
simplerick0simplerick0

sast

Scan source code for security flaws and produce markdown findings.

Community
Advanced
christopherlouetchristopherlouet
5

qa-security

Audit codebases for OWASP top 10 security vulnerabilities.

Community
Advanced