Home / Skills / security-threat-model
security-threat-model
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a code
- License
- Not stated
- SKILL.md tokens
- 1,389
- Bundled files
- 4
- Bundled tokens (estimated)
- 6,338
Cost per 1,000 loads
Estimated input cost per 1,000 loads of SKILL.md only (characters ÷ 4). Bundled files, output tokens and execution are excluded.
| Model | Input / 1M tokens | 1,000 loads |
|---|---|---|
| Claude Opus 5 | $5.00 | $6.95 |
| Claude Sonnet 5 | $2.00 | $2.78 |
| Claude Haiku 4.5 | $1.00 | $1.39 |
Safety flags
Detected automatically from files; not a security audit.
- Runs scripts
- No
- Network access
- No
- Shell commands
- No
Works with
Open SKILL.md format
- Claude Code
- Codex
- Cursor
- GitHub Copilot
- Gemini CLI
- OpenCode
- Goose
Install
npx skills add openai/skills --skill security-threat-modelLast verified:
security-threat-model FAQ
What does the security-threat-model skill do?
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a code Source: https://github.com/openai/skills/blob/main/skills/.curated/security-threat-model/SKILL.md
What does the security-threat-model skill cost to load?
SKILL.md is about 1,389 tokens. Estimated input cost per 1,000 loads: Claude Opus 5 $6.95; Claude Sonnet 5 $2.78; Claude Haiku 4.5 $1.39. Estimated input cost per 1,000 loads of SKILL.md only (characters ÷ 4). Bundled files, output tokens and execution are excluded. Prices: https://docs.anthropic.com/en/docs/about-claude/pricing
How do I install the security-threat-model skill?
Skills CLI: npx skills add openai/skills --skill security-threat-model. Download the security-threat-model skill folder as a ZIP and upload it in Claude.ai skills settings.
Is the security-threat-model skill safe?
No runs-scripts, network-access or shell-command flags were detected. Flags are detected automatically from the skill's files and are not a security audit; review the SKILL.md before installing.