Security threat model
Builds a repository-grounded threat model with assets, trust boundaries, attacker capabilities, abuse paths, and mitigations.
OpenAI
What this skill does
Explicit trigger for threat modeling a repository/path and producing a concise Markdown model.
Where, why and how to use it
Use when requested to enumerate threats or abuse paths. Anchor statements to actual code/architecture evidence and state assumptions.
Official historical Codex skill, not current catalog guidance. It addresses threat modeling, not an end-to-end scan or validation of fixes.
Source location
openai/skills:skills/.curated/security-threat-model/SKILL.md
Compatibility and setup
Codex skill format; adapt only after checking target host.
Requires source access and deployment/context assumptions.
Boundaries
Do not label inferred attack paths as validated vulnerabilities; this does not authorize exploit testing.
Source version
openai/skills main; deprecated; unpinned. Reference checked 2026-10-14. Source verification does not mean this skill is installed, its connector is available or its service entitlement active.
Example instruction
Threat-model the authentication and recovery boundary in this repo; cite source paths and assumptions.