Testing and security
Security Best Practices
Perform language and framework specific security best-practice reviews and suggest improvements.
OpenAI13 filesLoading page…
OpenAISecurity Threat Model
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model.
What does it do?
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model.
Read the publisher's original description
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.
Source information
- Repository
- openai/skills
- Revision
49f948f- Source check
- November 11, 2026
- License
- File-specific license
- Content
- 5 files
File verification hash
SKILL.md / SHA-256
1283c0dd62a8104d9edda4583569b5d8510b4ddaa45120687c999250fd96bad2Know the source and the review scope.
This record comes from the publisher's repository. The skill and supporting files have not undergone a security audit. Review the contents and required permissions before installing.
Read the selection policyAdd to project
In your project folder's terminal
npx skills add 'https://github.com/openai/skills/tree/49f948faa9258a0c61caceaf225e179651397431/skills/.curated/security-threat-model' -a codexRequires Node.js 22.20 or later. The command targets the catalog's pinned revision.
- 1Run the command in your project folder.
- 2Confirm the skill and target in the CLI.
- 3Restart your agent and invoke the skill by name.
This source was created for Codex. Other agents may require an external tool or adaptation.
The ZIP includes the entire repository and its supporting files.
Related skills
Open categoryOpenAI13 filesTesting and security
Security Ownership Map
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.
OpenAI8 filesTesting and security
Playwright Interactive
Persistent browser and Electron interaction through js_repl for fast iterative UI debugging.
OpenAI6 filesTesting and security
Playwright
Automate a real browser with Playwright to test user journeys and inspect page behavior.
OpenAI9 files