threat-model
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- Structured Security Analysis Framework: The skill defines a formal process for identifying assets, trust boundaries, and attacker-controlled inputs within a codebase. This is a standard security practice used to guide vulnerability discovery.
- Guidance-Based Generation: It utilizes specific guidance files (
references/threat-model-guidance.md) to ensure the generated models are consistent, covering overview, attack surfaces, and severity calibration. - Artifact Resolution and Caching: The workflow includes logic to resolve scan artifact paths and reuse cached models only if the repository and version match, promoting efficiency without compromising accuracy.
- Boundary Enforcement: The instructions explicitly warn against including current diff findings in the repository-scoped model, ensuring the output remains a high-level security architecture document rather than a point-in-time scan report.
Audit Metadata