The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading official releases of OWASP Threat Dragon from its GitHub repository and pulling the official Docker image (owasp/threat-dragon:latest). These references target a well-known and trusted open-source security organization.
[COMMAND_EXECUTION]: The documentation includes standard docker run commands for deploying the web instance. These commands include best practices such as generating random JWT signing keys using openssl at runtime to ensure environment security.
[INDIRECT_PROMPT_INJECTION]: The process.py script contains a data ingestion surface where it reads and parses JSON threat model files to generate coverage reports. The script performs structured data extraction for reporting and statistics rather than executing instructions contained within the data. Standard precautions for processing external files are applicable.

performing-threat-modeling-with-owasp-threat-dragon