security-threat-model
Build concise repository-grounded threat models covering assets, boundaries, attacker capabilities, abuse paths, and mitigations.
Source facts
- Repository
- Calvin-Corbett/thomas
- Last source activity
- September 9, 2026 at 02:49
- Detected SKILL.md language
- English
- Stars
- 4
- Forks
- 0
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- security-threat-model
- description
- Build concise repository-grounded threat models covering assets, boundaries, attacker capabilities, abuse paths, and mitigations.
# Security Threat Model
Use this skill when the user explicitly asks for threat modeling, abuse-path analysis, or AppSec-oriented design review.
## Workflow
1. Define the system boundary, assets, and trust assumptions.
2. Enumerate attacker capabilities and likely abuse paths grounded in the actual architecture.
3. Identify mitigations, detection gaps, and residual risk.
4. Write the model in a concise structure that can drive implementation decisions.
5. Separate confirmed architecture facts from assumptions that need validation.
## Rules
- Anchor the model in the real repo or system rather than abstract templates.
- Keep abuse paths concrete enough to be actionable.
View on GitHub