threat-model

name	threat-model
description	MCP threat-model artifact for a scaffolded harness. Reports allowed/denied tools, dangerous permissions count, secrets reachability, network/shell/file-write grants, default-deny posture. Verdict: clean (exit 0) / medium (exit 1) / high (exit 2). The 'enterprise gold' artifact for PR + compliance review.

threat-model

Codex skill: MCP threat-model artifact for PR / compliance review (iter 112 → iter 114). User-labelled "enterprise gold."

What it does

Renders the existing mcp-scan findings as a clean threat-model artifact in the shape a security / compliance reviewer wants to see attached to a PR:

MCP Threat Model

  Allowed tools:         3
  Denied tools:          14
  Dangerous permissions: 0
  Secrets reachable:     no
  Network access:        no
  Shell access:          no
  File write:            no
  Default-deny policy:   yes
  Audit log:             yes

Verdict: clean (exit 0)

Same underlying scan as mcp-scan, presented as a single-screen artifact.

Verdict	Exit	Triggers
clean	0	no dangerous perms, no secret exposure
medium	1	network OR file-write granted, OR no audit log
high	2	shell granted OR default-deny OFF OR secrets reachable

The "secrets reachable" heuristic is conservative: true when MCP is in use AND deny rules don't guard .env* AND allow rules include any Read(...) grant.

Usage from Codex

/threat-model path=./my-harness
/threat-model path=./my-harness bundle=true