Threat Modeling
Purpose
Build a practical threat model that helps an AI agent focus security work on the highest-risk paths. Use it before implementation, during feature review, or when deciding which vulnerability classes and tests deserve the most attention.
Core Questions
Always answer:
- What assets matter here?
- Who can interact with them?
- Where does trust change?
- How could an attacker abuse the feature?
- Which controls must exist before release?
Workflow
[Description truncada. Veja o README completo no GitHub.]