security-threat-model

The 'security-threat-model' skill provides automated, repository-grounded threat modeling to identify and analyze potential security risks within a codebase or specific project paths. It solves the problem of ad-hoc or generic threat modeling by delivering actionable, evidence-backed AppSec assessments. By focusing on concrete trust boundaries, assets, entry points, and realistic attacker capabilities, this skill ensures that security evaluations are grounded in the actual architecture and components of the repository, rather than hypothetical or checklist-based approaches.

Key features include the ability to extract and scope system components from the repository, identify assets and trust boundaries, enumerate realistic attacker capabilities, and produce a prioritized list of threats as abuse paths. It supports explicit likelihood and impact reasoning, validation of assumptions with the user, and generation of concrete mitigation recommendations tied to specific components, boundaries, or controls. The workflow emphasizes evidence-based claims and user confirmation of critical assumptions, ensuring that the threat model is both accurate and actionable.

This skill is particularly useful for security engineers, developers responsible for application security, and DevSecOps teams who need to perform threat modeling directly against a repository. It is ideal when assessing new features, deployment scenarios, or internet-exposed components, and for organizations aiming to integrate security analysis into their development lifecycle. Users benefit from precise, high-quality threat assessments that can guide mitigation planning and strengthen overall application security posture.