security-threat-model SKILL.md skillA
security-threat-model from majiayu000/spellbook is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add majiayu000/spellbook/security-threat-model@git:20260626.97a677ePins git:20260626.97a677e in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- majiayu000/spellbook
- Path
skills/security-threat-model/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260626.97a677e, committed Jun 26, 2026
- Size
- 2,242 bytes
- Repository stars
- 290
- License
- MIT
Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during implementation. Use when touching authentication, authorization, payments, secrets, user data, uploads, webhooks, admin tools, innerHTML/eval/exec, dependency upgrades, or cross-tenant access.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Security Threat Model ## Purpose Use this skill before implementing or approving security-sensitive changes. It complements `auth-security` and `server-security` by mapping assets, attackers, trust boundaries, and concrete controls. ## Scope First Identify: 1. Assets: credentials, tokens, user data, tenant data, money movement, admin actions. 2. Actors: anonymous user, authenticated user, tenant admin, internal operator, compromised dependency. 3. Trust boundaries: browser/server, service/service, tenant/tenant, CI/runtime, third-party callbacks. 4. Entry points: API routes, CLI commands, jobs, webhooks, uploads, config files. 5. Existing controls: validation, authz, rate limits, audit logs, secret storage. ## Threat Checklist Check at least: - Spoofing: can an identity, tenant, callback, or service be forged? - Tampering: can payloads, configs, migrations, artifacts, or logs be altered? - Repudiation: is there an audit trail for sensitive actions? - Information disclosure: can secrets, PII, logs, or tenant data leak? - Denial of service: can expensive paths be amplified? - Elevation of privilege: can user or service permissions expand? …
Read the whole file at its exact version.
How to install
mdr add majiayu000/spellbook/security-threat-model@sha256:aa89af94c4387ec3The line at the top of this page pins the label git:20260626.97a677e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4szd4nnxew7vzcmy)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jun 26, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2242 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
majiayu000/spellbook · 290 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4szd4nnxew7vzcmy GET https://markdownregistry.com/api/v1/resolve?ref=majiayu000/spellbook/security-threat-model GET https://markdownregistry.com/api/v1/blob/aa89af94c4387ec3daf973cf8e2786927783315eda0347d5c2985cc32a50fa60
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from majiayu000/spellbook
Every file in majiayu000/spellbook