openai-security-threat-model - Repository-Grounded AppSec Threat Modeling
Performs repository-grounded threat modeling to enumerate trust boundaries, assets, attacker capabilities, abuse paths, and mitigations in Markdown.
Tags
Updated: 2026-09-15Capabilities
Typical Inputs
What this skill does
- Extract system model from repository
- Derive trust boundaries and assets
- Calibrate attacker capabilities and assets
- Enumerate security threats as abuse paths
- Prioritize risks with explicit reasoning
- Validate service context with users
- Recommend concrete security mitigations
- Generate Markdown threat model report
Inputs
- Repository root path or directory path
- Deployment model and authentication expectations
- Prompt template reference file
- User feedback on key assumptions
Outputs
- Markdown threat model report file
- Context clarification questions for users
Requirements
- Access to source code repository
- Access to prompt template reference file