Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling.
安装
npx skills add trailofbits/skills-curated --skill openai-security-threat-modelnpx skills add trailofbits/skills-curated --skill openai-security-threat-model -a claude-code -gnpx skills add trailofbits/skills-curated --skill openai-security-threat-model -a codex -ggemini skills install https://github.com/trailofbits/skills-curated.git --path plugins/openai-security-threat-model/skills/openai-security-threat-modelgh skill install trailofbits/skills-curated openai-security-threat-modelgit clone --depth 1 https://github.com/trailofbits/skills-curated /tmp/trailofbits__skills-curated
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills-curated/plugins/openai-security-threat-model/skills/openai-security-threat-model ~/.claude/skills/openai-security-threat-model # Claude Code
cp -R /tmp/trailofbits__skills-curated/plugins/openai-security-threat-model/skills/openai-security-threat-model ~/.agents/skills/openai-security-threat-model # Codex, Cursor, Gemini CLI, Copilot, OpenCode