security-review-owasp-threat-modeling

What problem does it solve?

This Skill helps security reviewers spot incomplete threat models, missing trust boundaries, and vague mitigations before they create real architectural risk.

Core Features & Use Cases

• System Model Validation: Checks whether data flows, trust boundaries, external entities, and critical components match the actual implementation.
• Threat Coverage Review: Evaluates STRIDE coverage across major attack paths and flags omitted threats that could hide high-impact abuse.
• Mitigation and Ownership Review: Verifies that threats have concrete, testable mitigations with clear ownership and reevaluation triggers.
• Use Case: Use it when reviewing an architecture diagram, threat model document, or implementation change to confirm that the security model still reflects reality.

Quick Start

Ask the security-review-owasp-threat-modeling skill to review the relevant files or architecture for missing threats, trust-boundary gaps, and unowned mitigations.