Individual skill
threat-modeling
Systematic threat modeling skill for applications, APIs, and systems using STRIDE, PASTA, Attack Trees, DREAD, LINDDUN, and OCTAVE. Use when assessing security architecture, creating data flow diagrams (Mermaid), enumerating threats from OpenAPI specs or architecture docs, building attack trees, mapping threats to NIST/CIS/OWASP ASVS controls, or producing a threat model report. Triggers on requests to threat model, analyze attack surface, create a DFD, apply STRIDE, or design security mitigations.
skills/threat-modeling/SKILL.md
Source commit a1a68f7010a9c97b22336dcbcfde539c492a7109
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Not checked yet
- Last checked
- Nov 11, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 109
- Repository last updated
- Apr 19, 2026
- License
- Not available
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- security Derived category
- docs Derived category
- security-application Derived category
- docs-api Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 10,364 bytesexamples/attack_tree_banking.mddoc · 5,166 bytesexamples/bounty_patterns_2024_2026.mddoc · 5,960 bytesexamples/mermaid_dfd_templates.mddoc · 4,497 bytesexamples/stride_threat_library.mddoc · 5,372 bytesmethodology/attack_trees.mddoc · 3,623 bytesmethodology/dread.mddoc · 2,945 bytesmethodology/linddun.mddoc · 3,972 bytesmethodology/octave.mddoc · 3,476 bytesmethodology/pasta.mddoc · 2,735 bytesmethodology/stride.mddoc · 5,703 bytesreferences/control_catalogs.mddoc · 5,255 bytesreferences/framework_comparison.mddoc · 3,860 bytesreferences/trust_boundary_patterns.mddoc · 5,735 bytesschemas/finding.jsonasset · 4,231 bytestemplates/stride_table.mddoc · 2,349 bytestemplates/threat_model_report.mddoc · 3,793 bytesworkflows/attack_tree_from_threat.mddoc · 3,935 bytesworkflows/dfd_creation.mddoc · 3,819 bytesworkflows/stride_from_arch_docs.mddoc · 3,523 bytesworkflows/stride_from_openapi.mddoc · 4,546 bytesworkflows/threat_to_mitigation.mddoc · 4,064 bytes
No licensed excerpt is available. You can inspect the pinned source.