Menu
Complete threat modeling workflow. Discovers assets, analyzes threats (STRIDE), verifies controls, maps compliance, generates reports.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Fast threat assessment (~30s). Returns JSON with risk level, top threats, critical gaps. For hooks and CI/CD.
Show threat model status - asset counts, threat distribution, control verification, compliance coverage.
| name | full |
| description | Complete threat modeling workflow. Discovers assets, analyzes threats (STRIDE), verifies controls, maps compliance, generates reports. |
| allowed-tools | Read, Write, Glob, Grep, Bash(mkdir:*), Bash(ls:*) |
/threatmodel:full [--docs <path>] [--compliance owasp,soc2,pci-dss]
Runs complete threat modeling in 5 phases:
.threatmodel/
├── config.yaml
├── state/
│ ├── assets.json # Discovered components
│ ├── dataflows.json # Data movement
│ ├── threats.json # STRIDE analysis
│ ├── controls.json # Security controls found
│ ├── gaps.json # Missing controls
│ └── compliance.json # Framework mapping
├── diagrams/
│ └── architecture.mmd # Mermaid diagram
├── reports/
│ ├── risk-report.md
│ └── executive-summary.md
└── baseline/
└── snapshot-{date}.json
Risk = Likelihood (1-5) × Impact (1-5)
| Score | Level |
|---|---|
| 16-25 | Critical |
| 10-15 | High |
| 5-9 | Medium |
| 1-4 | Low |