# Security Threat Model

> Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

- Skill: `hebertzhu/security-threat-model` (Agent Skill)
- Install (CLI): `npx skillmds@latest add hebertzhu/security-threat-model`
- Raw SKILL.md: https://api.skillmd.com/api/skills/hebertzhu/security-threat-model/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: hebertzhu (https://skillmd.com/u/hebertzhu)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/hebertzhu/security-threat-model

---


# security-threat-model

## Intent
- Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

## Default operating pattern
1. Identify assets, trust boundaries, attacker assumptions, and sensitive flows.
2. Inspect the current implementation or design surface that creates risk.
3. Rank issues by impact, likelihood, and exploitability.
4. Recommend the smallest safe-by-default changes that materially reduce exposure.
5. Note verification steps and any residual risk that still remains.

## Pack fit
- Included in: `security-quality`
- Keep examples generic, privacy-safe, and portable across hosts.

## Boundary
- Do not reduce threat modeling to a static checklist with no real system boundaries.