القائمة
Phase 9 Output Generation guide with Threat Composer export reference. Use when generating final reports, exporting to JSON/Markdown, or completing the threat modeling process.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Phase 1 Business Context Analysis guide. Use when starting a threat model, setting business context, or configuring business features like industry sector, data sensitivity, and regulatory requirements.
Phase 2 Architecture Analysis guide. Use when documenting system components, connections, data stores, or analyzing technical architecture for threat modeling.
Phase 3 Threat Actor Analysis guide. Use when identifying threat actors, setting relevance and priority, or analyzing who might attack the system.
Phase 4 Trust Boundary Analysis guide. Use when defining trust zones, crossing points, and security boundaries between system components.
Phase 5 Asset Flow Analysis guide. Use when identifying valuable assets, tracking data flows, or analyzing how sensitive data moves through the system.
Phase 6 Threat Identification guide with STRIDE methodology reference. Use when identifying threats, categorizing security issues, applying STRIDE analysis, or assessing threat severity and likelihood.
| name | phase-9-output-generation |
| description | Phase 9 Output Generation guide with Threat Composer export reference. Use when generating final reports, exporting to JSON/Markdown, or completing the threat modeling process. |
Generate final deliverables: Threat Composer-compatible JSON export and human-readable Markdown report. All files are saved to the .threatmodel/ directory.
Recommended: Automated export that generates everything with a timestamped filename.
export_comprehensive_threat_model() internally.threatmodel/Manual export with custom filename.
output_path: Base filename (extensions added automatically).json and .md filesExport including code validation results (use after Phase 7.5).
get_threat_model_progress() -- Final progress summary with phase completionlist_assumptions() -- All documented assumptions.threatmodel/comprehensive_threat_model_YYYYMMDD_HHMMSS.json
Schema (version 1):
{
"schema": 1,
"applicationInfo": { "name": "", "description": "" },
"architecture": { "description": "" },
"dataflow": { "description": "" },
"assumptions": [...],
"mitigations": [...],
"assumptionLinks": [...],
"mitigationLinks": [...],
"threats": [...]
}
| Field | Max Length |
|---|---|
| threatSource | 200 chars |
| prerequisites | 200 chars |
| threatAction | 200 chars |
| threatImpact | 200 chars |
| statement | 1400 chars |
| tags (each) | 30 chars |
| Threats | Mitigations |
|---|---|
| threatIdentified | mitigationIdentified |
| threatResolved | mitigationInProgress |
| threatResolvedNotUseful | mitigationResolved |
| mitigationResolvedWillNotAction |
.threatmodel/comprehensive_threat_model_YYYYMMDD_HHMMSS.md
Contains:
.json file from .threatmodel/get_phase_9_guidance()execute_final_export_step() (or export_comprehensive_threat_model() with custom name)get_threat_model_progress() for final summary.threatmodel/.threatmodel/ directory