threat-modeling
Automated STRIDE threat modeling and security risk assessment
All Skills in This Repository (1)
Pure Emerald Level IndicatorsFrequently Asked Questions
FAQPage SchemaHow to install threat-modeling?โผ
Run `npx skills add fr33d3m0n/threat-modeling --all -g -y` in your terminal to install the skill globally.
How to run a threat model on my codebase?โผ
Start your coding assistant in the project directory and ask it to perform a complete threat model analysis. The skill automatically walks through 8 phases, from project understanding to final risk reports.
What reports does this threat modeling skill generate?โผ
It produces a risk assessment report, risk inventory, mitigation measures document, and penetration test plan, plus optional detailed per-vulnerability reports and HTML versions.
Does it support binary and complex system analysis?โผ
Yes. It integrates Ghidra, CodeQL, Joern, and radare2 for binary reverse engineering, call chain tracing, and automated vulnerability detection in C/C++ and large systems.
Can I use it without security expertise?โผ
Yes. You describe your project in plain language, and the skill applies STRIDE methodology and built-in security knowledge bases to produce professional-grade analysis automatically.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core