Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling.
Install
npx skills add openai/skills --skill security-threat-modelnpx skills add openai/skills --skill security-threat-model -a claude-code -gnpx skills add openai/skills --skill security-threat-model -a codex -ggemini skills install https://github.com/openai/skills.git --path skills/.curated/security-threat-modelgh skill install openai/skills security-threat-modelgit clone --depth 1 https://github.com/openai/skills /tmp/openai__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/openai__skills/skills/.curated/security-threat-model ~/.claude/skills/security-threat-model # Claude Code
cp -R /tmp/openai__skills/skills/.curated/security-threat-model ~/.agents/skills/security-threat-model # Codex, Cursor, Gemini CLI, Copilot, OpenCode