security-review

Name: security-review
Availability: InStock
Author: solitasroh

Perform STRIDE threat modeling for embedded MCU/MPU/WPF systems.

2|1|Updated Mar 22, 2026

Search Tags:#security #analysis #risk-assessment #threat-modeling #stride #domain-detection #embedded-systems

Ready to run

npx skills add https://github.com/solitasroh/mcukit --skill security-review-solitasroh

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/solitasroh/mcukit/tree/main/skills/security-review
Command: npx skills add https://github.com/solitasroh/mcukit --skill security-review-solitasroh

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

STRIDE threat modeling tailored for embedded systems to identify, prioritize, and mitigate security risks early in the development lifecycle.

Core Features & Use Cases

Domain-aware threat modeling with auto-detection of MCU/MPU/WPF contexts and tailored STRIDE checks.
Confidence-based filtering with clear mitigations to guide secure design and implementation.
Use Case: Assess security for critical features (e.g., firmware updates, bootloaders) to surface threats and remediation steps.

Quick Start

To start a security review, run /security-review <feature> with optional --domain and --confidence flags.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform STRIDE threat modeling for embedded systems?▼

STRIDE threat modeling for embedded systems is performed by running a security review on a specific feature, which applies tailored STRIDE checks to identify and prioritize security risks. The tool auto-detects your embedded domain context to provide relevant threat assessments.

Can I run threat modeling on an MCU or MPU firmware update feature?▼

Yes, you can run threat modeling on an MCU or MPU firmware update feature. The tool automatically detects the embedded domain context and applies targeted security assessments to surface threats and remediation steps for critical bootloader and firmware features.

How do I filter threat modeling results by confidence level?▼

You filter threat modeling results by confidence level using the optional --confidence flag when starting your security review. This filters the analysis output to exclude false positives and ensures only high-confidence threats and clear mitigations are returned.

What is the best way to assess security risks for embedded bootloaders?▼

The best way to assess security risks for embedded bootloaders is using domain-aware threat modeling that applies tailored STRIDE checks. This approach early in the development lifecycle surfaces specific threats, prioritizes risks, and provides clear mitigation steps for bootloader implementations.

Does embedded threat modeling support WPF projects?▼

Yes, embedded threat modeling supports WPF projects alongside MCU and MPU contexts. The analysis tool auto-detects the domain and applies STRIDE threat modeling checks specifically tailored to the detected project context for accurate security risk triage.