skills.rest
GeneralJerel
GeneralJerelCOMMUNITY
Explore all skills by this author →
GitHub

create-threat-model

Perform STRIDE threat modeling on architecture documents and generate prioritized mitigation files.

6|Updated Feb 19, 2026
Search Tags:#architecture#security#risk-assessment#threat-modeling#stride#mitigations
One-click install
npx skills add https://github.com/GeneralJerel/chalk-skills --skill create-threat-model-generaljerel
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: create-threat-model
Source: https://github.com/GeneralJerel/chalk-skills/tree/main/skills/create-threat-model
Command: npx skills add https://github.com/GeneralJerel/chalk-skills --skill create-threat-model-generaljerel

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security and software teams quickly identify threats and mitigations for a system or component using STRIDE methodology, providing actionable mitigations and structured output.

Core Features & Use Cases

  • STRIDE-based threat modeling for defined scope (system or component)
  • Boundary discovery from architecture/docs and risk prioritization
  • Auto-generates a threat model file with mitigations and top risks

Quick Start

Threat-model the login service with the architecture docs in .chalk/docs/engineering and generate the threat model for the auth component.

Frequently Asked Questions about create-threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a STRIDE threat model for a system component?▼

To generate a STRIDE threat model, apply this skill to your architecture and design documents to map trust boundaries, evaluate threats, and produce a structured markdown file with prioritized mitigations and a top-risk summary.

What is STRIDE-based threat modeling and how does it identify security risks?▼

STRIDE threat modeling identifies security risks by mapping trust boundaries within a system or component architecture, evaluating attack vectors at each boundary, and prioritizing actionable mitigations against discovered threats.

Can I threat model a specific component instead of an entire system architecture?▼

Yes, you can define the scope to threat model either an entire system or a specific component, mapping trust boundaries and evaluating threats precisely where defined within your architecture and design documents.

How do I prioritize security mitigations discovered during threat modeling?▼

This skill prioritizes security mitigations by evaluating discovered attack vectors and mapping trust boundaries, generating a structured threat model file that includes a prioritized mitigation list and a top-risk summary.

Where are generated threat model files saved when analyzing architecture documents?▼

Generated threat model files are saved as markdown documents at .chalk/docs/engineering/<n>_threat_model_<system-slug>.md, containing the structured threat model, prioritized mitigations, and top-risk summary.

Related Skills

Explore More Software Engineering Skills→
jwm-axonijwm-axoni
3

threat-model

Define system scope, assets, entry points, and STRIDE threats for a threat model document.

Community
Advanced
josemlopezjosemlopez
8

tm-tests

Generate security test cases from threat models in Markdown, Jest, Pytest, or Playwright formats.

Community
Intermediate
windshockwindshock
3

security-architecture-review

Derive DFDs, trust boundaries, and Attack Flow overlays from code.

Community
Advanced
Logos-LiberLogos-Liber
17

threat-modeling

Guide threat modeling with STRIDE, PASTA, and LINDDUN frameworks.

Official
Intermediate