skills/security-threat-model/SKILL.md

---
name: security-threat-model
description: Creates application-specific threat models and security gates.
---

## Architect edition scope

This edition produces local plans, checks and review artifacts only. Instructions below describing provisioning, deployment, API calls, runtime tests or publishing are plans for an authorized operator, not actions to execute. Never connect to or modify an environment through this edition. No runtime test or deployment may be claimed from generated checklists.

# Security Threat Model

Create `threat-model.md`; assess data classification, roles, field security, identities, input validation, audit, and incident ownership. Never include secrets in a blueprint, solution, or telemetry.