Individual skill
threat-modeler
Runs structured STRIDE threat modeling by decomposing a system into a data flow diagram, enumerating threats per element (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege), and producing prioritized, actionable mitigations with risk ratings. Use this skill when the user asks to "threat model", "do a STRIDE analysis", "find security threats", "assess attack surface", "build a data flow diagram for security", "review the security design", or wants a risk-ranked list of threats and countermeasures for a feature, API, service, or architecture.
threat-modeler/SKILL.md
Source commit f9a456bf34c297bd23fb234f410ec9b239ebed14
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Local scripts
- Last checked
- Nov 6, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 12
- Repository last updated
- Oct 14, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent-skills Repository topic
- ai-agents Repository topic
- anthropic Repository topic
- awesome Repository topic
- claude Repository topic
- claude-code Repository topic
- codex Repository topic
- cursor Repository topic
- gemini-cli Repository topic
- llm Repository topic
- security Derived category
- engineering Derived category
- design Derived category
- data Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 9,992 bytesexamples/url-shortener.mddoc · 5,930 bytesreferences/risk-rating.mddoc · 3,385 bytesreferences/stride-catalog.mddoc · 6,419 bytesscripts/threat_report.pyruns · 6,748 bytestemplates/threat-model.mddoc · 3,099 bytes
Read excerpt
# Threat Modeler (STRIDE)
## Overview
Keywords: STRIDE, threat model, threat modeling, data flow diagram, DFD, trust boundary, attack surface, spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege, DREAD, risk rating, mitigation, countermeasure, security review, attacker, asset.
This skill drives a rigorous, repeatable threat-modeling session using the **STRIDE** methodology popularized by Microsoft's Security Development Lifecycle. It turns an architecture description into:
1. A **data flow diagram (DFD)** with trust boundaries.
2. A **per-element threat enumeration** mapped to the six STRIDE categories.
3. A **prioritized mitigation plan** with risk ratings and concrete countermeasures.
The output is a single threat model document. Threat modeling answers four questions (the Shostack frame): *What are we building? What can go wrong? What are we going to do about it? Did we do a good enough job?*
