threat-model
Produces a threat model — purpose, deployment, trusted inputs, untrusted inputs — for a new feature or component before it's implemented. Use when writing an implementation plan for a new API endpoint, data pipeline, agent loop, or system component. Also invoke when a plan introduces new trust boundaries, handles user-supplied data, adds authentication flows, or integrates external services.
Install
With your agent
Install OMGSkills skill "thejefflarson/soundcheck:.claude/skills/threat-model" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/thejefflarson/soundcheck /tmp/soundcheck && ln -s /tmp/soundcheck/.claude/skills/threat-model ~/.claude/skills/threat-modelFrom README
Threat Model (A06:2025) What this checks This skill produces the threat-model context a developer needs before writing the code: what is this thing, where will it run, what inputs do we trust, what inputs do we not. It does not emit findings or apply a checklist of "missing controls" — that's the developer's job once they have the context. Single source of truth: this skill delegates to the threat-modeling subagent in .claude/agents/threat-modeling.md. The subagent's JSON output is the canonical threat-model shape. Vulnerable patterns This is an orchestrator skill. The agent it dispatches has no vulnerable-pattern catalog of its own — it produces context, and later auditors (vulnerability-audit, design-review, contract-audit) use that context to find code-level issues. Procedure Use the Agent tool to dispatch one threat-modeling subagent. Pass it the plan, spec, or codebase under discussion.
More from this repo
authentication-failures
Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code.
broken-access-control
Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users'...
concurrency-correctness
Detects multi-threaded code where a lock is held across a blocking operation, lock acquisition order risks deadlock,...