threat-model

Build a threat model for a change, feature, or system. Maps data flows, trust boundaries, assets, and entry points (including agent tool calls, retrieved documents, MCP servers, and memory), then ranks abuse paths and ties each mitigation to a test that proves it. Use for "threat model this" or "what could an attacker do here".