Threat modeling skill for new features, services, endpoints, or repositories. Trigger when the user asks to: "threat model this", "analyze attack surface", "find abuse cases", "map trust boundaries", "prioritize security review", or wants a structured security design review before or alongside coding. Complements eresus-sast-scanner by turning architecture into a prioritized scan plan.
Receba novas skills de Design e Frontend toda segunda
1 email curto, só com as skills novas de Design e Frontend. 4 minutos de leitura, sem spam, cancela com 1 clique.
Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.
Ler descrição completaRecolher descrição
Threat Modeling
Purpose
Build a practical threat model that helps an AI agent focus security work on the highest-risk paths. Use it before implementation, during feature review, or when deciding which vulnerability classes and tests deserve the most attention.
Core Questions
Always answer:
What assets matter here?
Who can interact with them?
Where does trust change?
How could an attacker abuse the feature?
Which controls must exist before release?
Workflow
#
[Description truncada. Veja o README completo no GitHub.]
