Open source alternatives to openai/security-threat-model
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Getgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Getopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Getandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Getmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Getod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Getgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database
About openai/security-threat-model
openai/security-threat-model
Generate repo-specific threat models identifying trust boundaries
security-threat-model is an agent skill from OpenAI's curated skills collection that performs an application-security threat model of a specific repository or code path. It maps the trust boundaries, assets, entry points and attacker capabilities of the system, then lists concrete abuse paths with likelihood and impact ratings. It writes a structured Markdown threat model file, and every threat is tied to actual code paths and components in the repository rather than to a generic checklist. Instead of working through a generic STRIDE list by hand, you get a model that reflects your system. Typical uses include threat modeling a web API before a security review, mapping trust boundaries in a multi-service backend, identifying abuse paths for file upload or parser endpoints, generating a threat model document to set the scope of a penetration test, and auditing what an attacker could do through an internet-exposed admin interface. It suits security reviewers, architects and developers who need a written model that a review can work from. A threat model is a starting point, so its likelihood and impact ratings are judgments to be checked with the team, and the model should be revisited when the system changes. The skill is listed on officialskills.sh and installs from the openai/skills repository. Install it with npx skills add https://github.com/openai/skills --skill security-threat-model.
- Price
- Free
- Made by
- openai
- Category
- AI Skills
- Website
- github.com/openai/skills/security-threat-model