# Threat Model

> Models threats for a service, feature, endpoint, integration, or architecture: assets, attackers, boundaries, flows, and abuse cases.

- Skill: `mesteriis/threat-model` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add mesteriis/threat-model`
- Raw SKILL.md: https://api.skillmd.com/api/skills/mesteriis/threat-model/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: Mesteriis (https://skillmd.com/u/mesteriis)
- Updated: 2026-08-19
- Page: https://skillmd.com/skills/mesteriis/threat-model

---


# Threat Model

Create a concise, evidence-based threat model.

## Workflow

1. Read the relevant repo instructions and architecture files.
2. Identify assets, actors, trust boundaries, entrypoints, data stores, and
   external integrations.
3. Map likely attacker-controlled inputs and privileged operations.
4. List abuse cases and required controls.
5. Recommend follow-up review skills.

## Output

- assets
- actors and attacker capabilities
- trust boundaries
- data flow and entrypoints
- required controls
- high-risk files or modules
- open questions

## Rule

If the Codex Security `threat-model` plugin skill is available, read it first
and use this skill as a concise local wrapper.