Repository threat modeling

Maps trust boundaries, assets, abuse paths and mitigations from repository evidence and writes a concise threat model.

Skills

Adding a package does not connect accounts or enable unsupported components. Review the requirements of each fixed resource in Teloa.

Source: Teloa official · GitHub openai/skills
Changes from the original:
agents/openai.yaml is not included.
Writes the result file only when an authorized file-writing tool exists, otherwise returns it in the reply; analyzes only code readable in the conversation.
GitHub: Resource file: catalog/skills/openai.security-threat-model.json
Files kept by the marketplace: artifacts/skills/openai.security-threat-model/1.0.0/
Original source (locked version): GitHub openai/skills@49f948f
License: Apache-2.0
License files: LICENSE.txt
Review: Reviewed by Teloa on 2026-09-25
Compatibility: Content only · Teloa >=0.2.0-alpha.6
Needs read access to the code under analysis; without it, works only from materials the user provides.
Technical compatibility
Teloa >=0.2.0-alpha.6 · agent engine 0.1.7-rc.1
Permissions and requirements: No extra permissions
Uses the network: no
Data flow: The files come with Teloa; nothing is downloaded when you add it. You can browse without signing in. Page views are counted with Cloudflare Web Analytics, which uses no cookies and does not record who you are; the install ranking on the market list reads only anonymous aggregate data.

Fixed package · Teloa official catalog