threat-model-analyst

Produces repository threat models with prioritized security findings and tracks threat changes against a previous report.

When to use it

Activate only when the user explicitly requests a threat model analysis or incremental update, or invokes /threat-model-analyst.

Give it a repository to threat-model, optionally with a previous report as a baseline; it writes a full or updated security report.