Installs into .claude/skills of the current project.
Are you the author of Threat Model Protocol?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/mcorbett51090-threat-model-protocol)
---
name: threat-model-protocol
description: "Build the threat model beyond code — oracle, flash-loan, and MEV economic surface. Reach for this on a 'can we be drained?' question."
---
# Skill: Threat-model the protocol
A code-correct contract can still be economically drained — the threat model includes economic surface (§3 #7).
## Step 1 — Map the code threats
Reentrancy/access/arithmetic from the security analysis (§3 #2).
## Step 2 — Add the oracle surface
Price feeds — use TWAP/multiple sources, never a spot DEX price (§3 #7).
## Step 3 — Add flash-loan + MEV
Flash-loan-amplified economic attacks, front-running, sandwiching (§3 #7).
## Step 4 — Own the upgrade risk
If a proxy is used, treat the admin key and storage layout as top-tier threats (§3 #6).
## Output
A threat model covering code, oracle, flash-loan, MEV, and upgrade surface, with mitigations named. Traverse Tree 3 in the decision-trees file.
