Generate Data Flow Diagrams with trust boundaries and data classifications from codebases.
npx skills add https://github.com/me2resh/apexyard --skill dfd
Please help me install this Agent Skill. Skill: dfd Source: https://github.com/me2resh/apexyard/tree/main/.claude/skills/dfd Command: npx skills add https://github.com/me2resh/apexyard --skill dfd
Turns a codebase into a clear, reviewable Data Flow Diagram (DFD) with explicit trust boundaries and data classifications so security and compliance work can start from one reliable source of truth.
Ask for a system-wide DFD draft by running: /dfd billing-api --scope-all
High-intent search queries and answers about installing and using this skill.
To generate a Data Flow Diagram from a codebase, use a six-axis discovery pass to extract actors, processes, stores, flows, and trust boundaries, then output Mermaid documentation for STRIDE threat modeling and GDPR compliance analysis.
Yes, you can export a DFD to Threat Dragon v2 JSON. This optional output provides a standardized format for downstream threat modeling and GDPR compliance checks to consume the same diagram data.
Mapping trust boundaries and data classifications across services requires a system-wide composition scan. This approach applies additive classification using annotations, environment heuristics, and schema heuristics across all registered services to produce a unified diagram.
STRIDE threat modeling and data classification heuristics work together by applying schema and environment heuristics to diagram elements. This additive classification provides the necessary evidence for GDPR compliance checks during the threat modeling process.
Yes, the DFD generation process supports human-in-the-loop review by presenting a candidate model for operator review. It features overwrite prompts and drift-aware re-run behavior to maintain diagram accuracy over time.
soberzergCreate and update product marketing context documents from codebase analysis.
AAbdulghanyGenerate a STRIDE threat catalogue from a DFD snapshot and export Threat Dragon v2 JSON.
PurpleAILABAnalyze project documentation to extract invariants and map trust assumptions.
cndoit18Generate .excalidraw architecture diagrams from codebase analysis.
