threat-model:tnf

What problem does it solve?

It helps reviewers and security engineers identify and document security threats introduced by a pull request for the TNF (Two-Node Fencing) topology, producing a structured, standards-based threat report instead of relying on ad-hoc reasoning.

Core Features & Use Cases

• PR threat analysis for TNF changes: Scans a PR’s changed files for security-relevant patterns and produces a TNF-specific report.
• STRIDE + DFD element mapping: Maps PR changes to TNF DFD elements and applies per-element STRIDE reasoning tied to the formal TNF threat model.
• MITRE ATT&CK and OWASP cross-references: Links findings to MITRE techniques and OWASP 2025 categories for consistent security communication.
• Evidence accumulation with a findings tracker: Appends results into a cumulative TNF findings file for repeatable review over time.

Quick Start

Run the command: /threat-model:tnf 2136 to analyze PR #2136 for TNF security threats and generate a mapped, structured report.