linddun

Performs LINDDUN privacy threat analysis across seven categories using specialized subagents in parallel.

12|1|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill linddun
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: linddun
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/linddun
Command: npx skills add https://github.com/florianbuetow/claude-code --skill linddun

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical gap in traditional security frameworks by systematically identifying privacy threats that can arise even in secure systems, ensuring compliance with data protection regulations.

Core Features & Use Cases

  • Comprehensive Privacy Threat Analysis: Dispatches specialized subagents to cover all 7 LINDDUN privacy threat categories (Linkability, Identifiability, Non-repudiation, Detectability, Data Disclosure, Unawareness, Non-compliance).
  • Regulatory Mapping: Maps findings to GDPR, CCPA, and HIPAA articles for compliance assurance.
  • Use Case: Before deploying a new feature that handles user data, run LINDDUN analysis to proactively identify and mitigate potential privacy risks like unauthorized data disclosure or user identifiability.

Quick Start

Run LINDDUN analysis on the current project to check for privacy threats.

Frequently Asked Questions about linddun

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify privacy threats in my code before deploying a new feature?

To identify privacy threats in your code, perform a LINDDUN privacy threat analysis. It systematically uncovers risks like unauthorized data disclosure and user identifiability by evaluating seven threat categories before deployment.

What is LINDDUN privacy threat modeling and how does it work?

LINDDUN privacy threat modeling is a framework that identifies privacy risks across seven categories: linkability, identifiability, non-repudiation, detectability, data disclosure, unawareness, and non-compliance. It dispatches specialized subagents to analyze each category in parallel.

Can threat modeling map privacy risks to GDPR and CCPA compliance requirements?

Yes, privacy threat modeling can map identified risks to GDPR, CCPA, and HIPAA regulations. This regulatory mapping ensures compliance assurance by connecting specific privacy findings directly to relevant regulatory articles.

Does data protection threat analysis support severity filtering and scoping?

Yes, data protection threat analysis supports detailed scoping and severity filtering. This allows you to focus the privacy threat evaluation on specific system components and prioritize the most critical identified risks.

What is the best way to uncover data disclosure and unawareness risks in user data?

The best way to uncover data disclosure and unawareness risks is running a comprehensive LINDDUN analysis. It proactively identifies these specific privacy threats by simulating expert-level adversarial scenarios against your system.