RetentaRetenta

Evidence record · captured 2026-10-10

OpenAI Security Threat Model

A repository-grounded AppSec workflow for trust boundaries, assets, attacker capabilities, abuse paths, prioritized risk, and evidence-linked mitigations.

Official publisherUnverifiedSource reviewedBehavior not tested
Source review

Editorial assessment

This is a source-only assessment. It does not claim runtime or security testing.

What it does

The skill builds a system model from repository evidence, maps concrete boundaries and assets to realistic abuse paths, calibrates likelihood and impact, pauses for material context, and writes an actionable threat model.

Best for

  • Threat-modeling a service or bounded repository area
  • Prioritizing abuse paths before a security review
  • Documenting mitigations against evidenced entry points

Strengths in the source

  • Rejects generic checklists in favor of repository-linked architectural claims.
  • Explicitly records attacker non-capabilities to avoid inflated severity.
  • Requires user validation before final rankings when deployment context changes the result.

Limitations

  • The required clarification pause makes it unsuitable for a fully unattended one-pass report.
  • Threat modeling does not replace code scanning, penetration testing, or runtime validation.
  • Quality depends on accurate deployment and data-sensitivity context beyond the repo.
  • The pinned publisher repository is deprecated in favor of OpenAI's plugins repository, so confirm the current distribution path before adopting it.

When not to use it

  • A general architecture summary with no security scope
  • A request to find specific code vulnerabilities rather than model abuse paths

Reviewed by Retenta editorial on 2026-10-10; scope: source only.

Files included in this review
  • skills/.curated/security-threat-model/SKILL.md
  • README.md
  • skills/.curated/security-threat-model/LICENSE.txt

Evidence and boundaries

Execution · not tested

Retenta reviewed the pinned source but did not install or execute this skill.

Security · not tested

No sandbox run, dependency audit, or independent security assessment is claimed.

Revision
49f948faa9258a0c61caceaf225e179651397431
License evidence
Apache-2.0The pinned skill directory includes an Apache License, Version 2.0 LICENSE.txt.
Last source change
2026-02-02
Independent verification
The source is controlled by OpenAI; Retenta has not independently verified its runtime behavior or security.
Upstream repository
Open publisher repository

Compatibility

Codex

documented

OpenAI's repository documents curated skills for Codex and installation through the built-in skill installer.

Requirements and access

  • A repository or explicit in-scope path
  • Deployment, exposure, authentication, and data-sensitivity context
  • User confirmation of assumptions that materially affect risk

Referenced tools

Repository searchMarkdown report generation

Install from the source

The pinned README documents name-based installation for curated skills and says to restart Codex. It also marks this repository deprecated in favor of OpenAI's plugins repository, so confirm the current path before adopting it.

View the SKILL.md at its source Verify the publisher's install documentation

More Security skills →

Codex skill installer

$skill-installer security-threat-model

Thyme RAG Capsules

Make this skill’s state durable, governed, and portable.

A Retenta capsule lets agents recall prior work, append provenance-stamped progress, and carry the memory to the next run.

Create durable agent memoryUnderstand the evidence labels