mcpbeat

Security Threat Model

christophacham/security-threat-model

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Use when the user asks to threat model a codebase or path, enumerate threats or abuse paths, or perform AppSec threat modeling. Do NOT use for general architecture summaries, code review, security best practices (use security-best-practices), or non-security design work.

8k tokens
context cost
the whole folder, loaded on every use
4
files
instructions only
1
copies elsewhere
how many repositories repackaged it
73
stars on the repo
on the repository, not the skill itself

Install

one command, takes just this skill from the repository
npx skills add https://github.com/christophacham/agent-skills-library --skill security-threat-model

Repackaged in 1 other repositories

same content, different owner
tech-leads-club/agent-skills open on GitHub →

How to use it

Copy the folder

Take christophacham/security-threat-model from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.