threat-model
A threat model answers
"what could go wrong with this system, who would do
it, and what should we do about it?"
independently of whether any specific
bug has been found yet. It is the map; vulnerability discovery is the metal
detector. A good threat model tells the pipeline where to look and tells triage
which findings matter.
Litmus test:
If patching one line of code makes an entry disappear, it was
a vulnerability, not a threat. A threat ("attacker achieves RCE via untrusted
media parsing") still stands after every known bug is fixed; a vulnerability
("
dr_wav.h:412
doesn't bounds-check
chunk_size
") does not. This skill
produces threats. Vulnerabilities appear only as
evidence
that raises a
threat's likelihood score.
Invocation:
/threat-model [bootstrap-then-interview|bootstrap|interview]
threat-model
安装
npx skills add https://github.com/anthropics/defending-code-reference-harness --skill threat-model