菜单
Phase 9 Output Generation guide with Threat Composer export reference. Use when generating final reports, exporting to JSON/Markdown, or completing the threat modeling process.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Phase 1 Business Context Analysis guide. Use when starting a threat model, setting business context, or configuring business features like industry sector, data sensitivity, and regulatory requirements.
Phase 2 Architecture Analysis guide. Use when documenting system components, connections, data stores, or analyzing technical architecture for threat modeling.
Phase 3 Threat Actor Analysis guide. Use when identifying threat actors, setting relevance and priority, or analyzing who might attack the system.
Phase 4 Trust Boundary Analysis guide. Use when defining trust zones, crossing points, and security boundaries between system components.
Phase 5 Asset Flow Analysis guide. Use when identifying valuable assets, tracking data flows, or analyzing how sensitive data moves through the system.
Phase 6 Threat Identification guide with STRIDE methodology reference. Use when identifying threats, categorizing security issues, applying STRIDE analysis, or assessing threat severity and likelihood.
| name | phase-9-output-generation |
| description | Phase 9 Output Generation guide with Threat Composer export reference. Use when generating final reports, exporting to JSON/Markdown, or completing the threat modeling process. |
Generate final deliverables: Threat Composer-compatible JSON export and human-readable Markdown report. All files are saved to the .threatmodel/ directory.
Recommended: Automated export that generates everything with a timestamped filename.
export_comprehensive_threat_model() internally.threatmodel/Manual export with custom filename.
output_path: Base filename (extensions added automatically).json and .md filesExport including code validation results (use after Phase 7.5).
get_threat_model_progress() -- Final progress summary with phase completionlist_assumptions() -- All documented assumptions.threatmodel/comprehensive_threat_model_YYYYMMDD_HHMMSS.json
Schema (version 1):
{
"schema": 1,
"applicationInfo": { "name": "", "description": "" },
"architecture": { "description": "" },
"dataflow": { "description": "" },
"assumptions": [...],
"mitigations": [...],
"assumptionLinks": [...],
"mitigationLinks": [...],
"threats": [...]
}
| Field | Max Length |
|---|---|
| threatSource | 200 chars |
| prerequisites | 200 chars |
| threatAction | 200 chars |
| threatImpact | 200 chars |
| statement | 1400 chars |
| tags (each) | 30 chars |
| Threats | Mitigations |
|---|---|
| threatIdentified | mitigationIdentified |
| threatResolved | mitigationInProgress |
| threatResolvedNotUseful | mitigationResolved |
| mitigationResolvedWillNotAction |
.threatmodel/comprehensive_threat_model_YYYYMMDD_HHMMSS.md
Contains:
.json file from .threatmodel/get_phase_9_guidance()execute_final_export_step() (or export_comprehensive_threat_model() with custom name)get_threat_model_progress() for final summary.threatmodel/.threatmodel/ directory