security-threat-model
Build concise repository-grounded threat models covering assets, boundaries, attacker capabilities, abuse paths, and mitigations.
来源信息
- 仓库
- Calvin-Corbett/thomas
- 最近来源活动
- 2026年9月9日 02:49
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 4
- 分支
- 0
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- security-threat-model
- description
- Build concise repository-grounded threat models covering assets, boundaries, attacker capabilities, abuse paths, and mitigations.
# Security Threat Model
Use this skill when the user explicitly asks for threat modeling, abuse-path analysis, or AppSec-oriented design review.
## Workflow
1. Define the system boundary, assets, and trust assumptions.
2. Enumerate attacker capabilities and likely abuse paths grounded in the actual architecture.
3. Identify mitigations, detection gaps, and residual risk.
4. Write the model in a concise structure that can drive implementation decisions.
5. Separate confirmed architecture facts from assumptions that need validation.
## Rules
- Anchor the model in the real repo or system rather than abstract templates.
- Keep abuse paths concrete enough to be actionable.
在 GitHub 查看