Threat Model Source Code Repo

Deliver an actionable, repo-specific threat model. Anchor every architectural claim to evidence in the repo, keep assumptions explicit, and prioritize realistic attacker goals over generic checklists.

Quick start

1. Collect or infer inputs:

• Repo root path and in-scope paths
• Usage, deployment model, internet exposure, auth expectations (if known)
• Existing repo summary or architecture spec
• Use references/prompt-template.md for repo summary prompts and the required output contract

Workflow