🛡️ Security Threat Model
This skill helps you generate an AppSec-grade threat model tailored to a repository or path, anchoring claims to evidence and suggesting concrete mitigations.
npx playbooks add skill openai/skills --skill security-threat-model
About Security Threat Model
This skill helps you generate an AppSec-grade threat model tailored to a repository or path, anchoring claims to evidence and suggesting concrete mitigations.
This compact 23-word instruction set is purpose-built for security work in AI coding agents. Install with a single command.
Use Cases
- Auditing code for OWASP Top 10 vulnerabilities
- Implementing authentication and authorization patterns
- Reviewing API security, rate limiting, and input validation
- Hardening infrastructure and dependency security
Example Prompts
System Prompt (23 words)
This skill helps you generate an AppSec-grade threat model tailored to a repository or path, anchoring claims to evidence and suggesting concrete mitigations.
Frequently Asked Questions
What is Security Threat Model?
Security Threat Model is a free security skill for AI coding agents. This skill helps you generate an AppSec-grade threat model tailored to a repository or path, anchoring claims to evidence and suggesting concrete mitigations.. It provides a specialized system prompt that configures your agent with security expertise.
How do I use Security Threat Model with Claude Code?
Run npx playbooks add skill openai/skills --skill security-threat-model in your terminal to install Security Threat Model into your Claude Code session. It works immediately after installation.
Which AI coding agents work with Security Threat Model?
Security Threat Model is compatible with Claude Code, Cursor, GitHub Copilot, Windsurf, OpenClaw, Cline, and any AI agent that supports custom system prompts or .cursorrules files.
Is Security Threat Model free to use?
Yes, Security Threat Model is completely free and open source. The full source is available on GitHub at https://github.com/openai/skills/tree/main/skills/.curated/security-threat-model. You only need a subscription to the AI agent you use it with.
