Alternatives to openai/security-threat-model
50 AI Skills apps to use instead, best rated first.
Top picks
- B
batch-grill-me
Getbatch-grill-me is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It interviews you relentlessly about a plan until you share an understanding. It maps decisions as a tree and asks every question it can answer now
- W
webapp-testing
GetNative Python Playwright scripts for testing local web applications with server lifecycle management. Includes with_server.py helper to automatically start and manage single or multiple servers before running automation scripts. Supports re
- C
content-research-writer
GetAssists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on
- O
openhue
Getopenhue is an agent skill from the OpenClaw project, listed on skills.sh. It lets an agent control Philips Hue lights and scenes through a Hue Bridge with the OpenHue CLI: turn lights on and off, dim rooms, set scenes such as movie mode, an
- I
implement
Getimplement is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It implements work from a spec or tickets: it fetches the ticket, works test-first at agreed seams, runs type checks and tests as it goes, reviews the re
- F
frontend-design
GetDistinctive, production-grade frontend interfaces that reject generic AI aesthetics through intentional design choices. Guides aesthetic direction selection (brutalist, maximalist, retro-futuristic, luxury, organic, etc.) before implementat
More AI Skills apps
About openai/security-threat-model
openai/security-threat-model
Generate repo-specific threat models identifying trust boundaries
security-threat-model is an agent skill from OpenAI's curated skills collection that performs an application-security threat model of a specific repository or code path. It maps the trust boundaries, assets, entry points and attacker capabilities of the system, then lists concrete abuse paths with likelihood and impact ratings. It writes a structured Markdown threat model file, and every threat is tied to actual code paths and components in the repository rather than to a generic checklist. Instead of working through a generic STRIDE list by hand, you get a model that reflects your system. Typical uses include threat modeling a web API before a security review, mapping trust boundaries in a multi-service backend, identifying abuse paths for file upload or parser endpoints, generating a threat model document to set the scope of a penetration test, and auditing what an attacker could do through an internet-exposed admin interface. It suits security reviewers, architects and developers who need a written model that a review can work from. A threat model is a starting point, so its likelihood and impact ratings are judgments to be checked with the team, and the model should be revisited when the system changes. The skill is listed on officialskills.sh and installs from the openai/skills repository. Install it with npx skills add https://github.com/openai/skills --skill security-threat-model.
- Price
- Free
- Made by
- openai
- Category
- AI Skills
- Website
- github.com/openai/skills/security-threat-model