threat-model - Assess architecture security decisions and boundaries
Threat-model new or existing systems by examining assets, actors, boundaries, controls, agent permissions, and evidence without replacing scanners.
Tags
Updated: 2026-10-16Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Identify assets, actors, boundaries
- Evaluate identity and access
- Assess data protection controls
- Review supply-chain trust
- Analyze agent permissions
- Bind findings to evidence
- Record security decisions
Inputs
- Architecture description
- Repository source and configuration
- Deployment and network topology
- Authentication and authorization details
- CI and dependency configuration
- Security scope and constraints
- Existing constitution
Outputs
- Boundary-first threat model
- Evidence-bound security findings
- One primary security review move
- Secondary review observations
- Reopening signals
- Security decision file
Requirements
- Access to referenced skill files
- Repository access for code-grounded review
- Permission to write the decision file