Identify assets, trust boundaries, threats, and mitigations before risks become incidents. Use for planning, evaluation, governance, or review of threat modeling; do not use as framework-specific or provider-specific implementation guidance.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Threat Modeling
## Purpose
Identify assets, trust boundaries, threats, and mitigations before risks become incidents.
## Problem Statement
Threat Modeling decisions often fail when teams optimize one visible concern while leaving ownership, evidence, dependencies, failure behavior, or change cost implicit.
## Core Concepts
- Outcome: the decision or behavior this capability must support.
- Boundary: what is inside scope, outside scope, and owned elsewhere.
- Evidence: requirements, measurements, risks, and uncertainty.
- Contract: inputs, outputs, invariants, and failure conditions.
- Evolution: compatibility, migration, reversibility, and review triggers.
## Engineering Principles
- Begin with explicit outcomes and accountable ownership.
- Match controls and rigor to evidenced impact and risk.
- Keep provider and framework choices outside the universal contract.
- Prefer observable, reversible decisions with clear failure handling.
- Record assumptions, alternatives, and conditions for reconsideration.
## Decision Framework
…
The line at the top of this page pins the label git:20260804.c3b625a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_bqlfohes6odsty65
GET https://markdownregistry.com/api/v1/resolve?ref=aniruddhadas1/oniroute_swarmagents/threat-modeling
GET https://markdownregistry.com/api/v1/blob/46ee560e1cb4caa9bbbf8984172af6aa6cdf089ad04cef63c58e0641b3fd8d9f
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
aniruddhadas1/oniroute_swarmagents · skills/official/ai/ai-evaluation-framework/SKILL.md · Build repeatable evaluation coverage across quality, safety, robustness, and efficiency. Use for planning, evaluation…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/ai-safety/SKILL.md · Identify and reduce harmful, misaligned, unauthorized, or unreliable AI behavior. Use for planning, evaluation…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/context-optimization/SKILL.md · Improve context relevance, ordering, compression, and freshness within explicit budgets. Use for planning, evaluation…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/hallucination-reduction/SKILL.md · Reduce unsupported claims through grounding, uncertainty, verification, and escalation. Use for planning, evaluation…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/model-evaluation/SKILL.md · Compare models against task quality, safety, cost, latency, and operational constraints. Use for planning, evaluation…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/prompt-evaluation/SKILL.md · Evaluate instruction quality through representative cases, criteria, and failure analysis. Use for planning…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/reasoning-strategies/SKILL.md · Select reasoning structure and verification depth according to task risk and ambiguity. Use for planning, evaluation…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/token-optimization/SKILL.md · Control token cost without sacrificing required context, quality, or traceability. Use for planning, evaluation…
aniruddhadas1/oniroute_swarmagents · skills/official/ai/tool-calling/SKILL.md · Govern tool selection, authorization, input validation, results, and failure handling. Use for planning, evaluation…
cbrock84/headcount · plugins/security/skills/threat-modeling/SKILL.md · Identifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry…
naodeng/awesome-qa-skills · skills/en/testing-types/threat-modeling/SKILL.md · Use this skill when you need evidence-bounded threat-modeling analysis and validation preparation; triggers include…
miosa-osa/osa · priv/skills/threat-modeling/SKILL.md · Build a concrete cyber defense threat model from assets, data flows and trust boundaries, then map controls to attack…
nahid-sparktales/agent-dispatcher · skills/security/threat-modeling/SKILL.md · Work out what is actually worth defending in this system — the trust boundaries data crosses, the assets behind them…
jpeetz/agent-skills · skills/security/threat-modeling/SKILL.md · Use this skill when performing security reviews of features, APIs, or architecture changes. Produces a STRIDE threat…
