skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

pasta-threats

Profile threat actors and map MITRE ATT&CK techniques to system threats.

12|1|Updated Feb 9, 2026
Search Tags:#security#threat modeling#supply chain#attack vectors#mitre att&ck#pasta
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill pasta-threats
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pasta-threats
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/pasta-threats
Command: npx skills add https://github.com/florianbuetow/claude-code --skill pasta-threats

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and analyze potential threats to a software system by mapping them to real-world intelligence, attack patterns, and adversary tactics, grounding the analysis in the MITRE ATT&CK framework.

Core Features & Use Cases

  • Threat Actor Profiling: Identifies likely threat actors (e.g., opportunistic, targeted, insider, supply chain, APT).
  • MITRE ATT&CK Mapping: Cross-references identified threats with specific MITRE ATT&CK techniques.
  • Attack Pattern Identification: Analyzes common attack vectors and patterns relevant to the system's technology stack.
  • Supply Chain Analysis: Assesses risks associated with third-party dependencies and CI/CD pipelines.
  • Use Case: After defining your system's components and trust boundaries, use this Skill to understand what specific threats your application faces, who might launch them, and how they might execute their attacks.

Quick Start

Analyze threats for the current system, focusing on the top 5 most likely threats based on the technology stack.

Frequently Asked Questions about pasta-threats

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map threats to my system architecture using MITRE ATT&CK?▼

To map threats to your system architecture, you profile potential threat actors and cross-reference their tactics with specific MITRE ATT&CK techniques. This process identifies relevant attack vectors and supply chain risks based on your technology stack.

What is the PASTA threat modeling methodology?▼

PASTA is a threat modeling methodology for analyzing risks to a software system. It consumes component inventory and attack surface data to profile threat actors, identify attack patterns, and produce a comprehensive threat catalog.

How do I analyze supply chain risks and attack vectors for my software?▼

Analyzing supply chain risks involves assessing vulnerabilities in third-party dependencies and CI/CD pipelines. You identify common attack vectors by mapping adversary tactics, techniques, and procedures to your specific technology stack.

Do I need to define system components and trust boundaries before threat modeling?▼

Yes, you need to define system components and trust boundaries before threat modeling. Providing this architectural context allows the analysis to accurately identify likely threat actors and map relevant attack patterns to your application.

Can I use this threat modeling approach for targeted and insider threat actors?▼

Yes, this threat modeling approach supports profiling various threat actors including targeted, insider, opportunistic, and supply chain threats. It identifies likely adversaries and maps their specific attack execution methods to your system.

Related Skills

Explore More Software Engineering Skills→
josemlopezjosemlopez
8

tm-init

Analyze architecture documentation to generate asset inventories, data flows, trust boundaries, and attack surface mappings.

Community
Intermediate
Jayarr03Jayarr03

mitre-attack-review

Map system attack paths to MITRE ATT&CK techniques and objectives.

Community
Advanced
GrassHopper42GrassHopper42

cso

Audits project security including credentials, dependencies, CI/CD pipelines, and threat models.

Community
Advanced
yusufcmgyusufcmg
1

stride-analysis-patterns

Apply the STRIDE methodology to identify and categorize security threats in software systems.

Community
Advanced