security-threat-model

Performs AppSec-grade threat modeling on a specific repository or code path. Maps trust boundaries, assets, entry points, and attacker capabilities, then enumerates concrete abuse paths with likelihood and impact ratings. Outputs a structured Markdown threat model file grounded in evidence from the repo. Instead of working through a generic STRIDE checklist manually, this skill anchors every threat to actual code paths and components in the repo, so the output reflects your system rather than a template.