Threat Model
Create a concise, evidence-based threat model.
Workflow
- Read the relevant repo instructions and architecture files.
- Identify assets, actors, trust boundaries, entrypoints, data stores, and external integrations.
- Map likely attacker-controlled inputs and privileged operations.
- List abuse cases and required controls.
- Recommend follow-up review skills.
Output
- assets
- actors and attacker capabilities
- trust boundaries
- data flow and entrypoints
- required controls
- high-risk files or modules
- open questions
Rule
If the Codex Security threat-model plugin skill is available, read it first
and use this skill as a concise local wrapper.