# Threat Modeling

> Perform threat modeling for a system or feature. Use when a senior developer needs security risk assessment.

- Skill: `proflead/threat-modeling` (Agent Skill)
- Install (CLI): `npx skillmds@latest add proflead/threat-modeling`
- Raw SKILL.md: https://api.skillmd.com/api/skills/proflead/threat-modeling/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: proflead (https://skillmd.com/u/proflead)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/proflead/threat-modeling

---


# Threat Modeling

## Purpose
Perform threat modeling for a system or feature.

## Inputs to request
- Architecture diagram or description.
- Assets and trust boundaries.
- Known threats or compliance needs.

## Workflow
1. Define assets, trust boundaries, and attack surface.
2. Enumerate threats using a structured method.
3. Propose mitigations and residual risks.

## Output
- Threat model summary with mitigations.

## Quality bar
- Track residual risk and acceptance.
- Document assumptions and scope.