Threat Model

Models threats for a service, feature, endpoint, integration, or architecture: assets, attackers, boundaries, flows, and abuse cases.

Mesteriis Updated 0 repo stars

File contents

Threat Model

Create a concise, evidence-based threat model.

Workflow

  1. Read the relevant repo instructions and architecture files.
  2. Identify assets, actors, trust boundaries, entrypoints, data stores, and external integrations.
  3. Map likely attacker-controlled inputs and privileged operations.
  4. List abuse cases and required controls.
  5. Recommend follow-up review skills.

Output

  • assets
  • actors and attacker capabilities
  • trust boundaries
  • data flow and entrypoints
  • required controls
  • high-risk files or modules
  • open questions

Rule

If the Codex Security threat-model plugin skill is available, read it first and use this skill as a concise local wrapper.

Mesteriis/Engineering-Bible-AI/tree/main/skills/threat-model commit 2ddb95bf6c

Frequently asked questions

npx skillmds@latest add mesteriis/threat-model