security-threat-modeling

Model assets, trust boundaries, and abuse paths to document security risks.

7|Updated Feb 14, 2026

Search Tags:#threat-modeling #risk-management #trust-boundaries #security-review #attack-surface #security-design

Ready to run

npx skills add https://github.com/KentoShimizu/sw-agent-skills --skill security-threat-modeling-kentoshimizu

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-threat-modeling
Source: https://github.com/KentoShimizu/sw-agent-skills/tree/main/skills/security-threat-modeling
Command: npx skills add https://github.com/KentoShimizu/sw-agent-skills --skill security-threat-modeling-kentoshimizu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

Explicitly identify and document security risks in new architectures by modeling assets, trust boundaries, attacker capabilities, and abuse paths to guide secure design decisions.

Core Features & Use Cases

Threat modeling with assets, trust boundaries, entry points, and abuse paths.
Prioritized mitigations with owners, target dates, and validation plans.
Security design validation for major releases and new features.

Quick Start

Model a new feature by listing its assets and mapping trust boundaries, attacker goals, and initial mitigations.

Frequently Asked Questions about security-threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security risks in a new software architecture?▼

Threat modeling identifies and documents security risks by mapping assets, trust boundaries, entry points, and attacker capabilities. It guides secure design decisions by making potential abuse paths explicit before implementation.

How do I document trust boundaries and attack surfaces for a major feature change?▼

Document trust boundaries and attack surfaces by listing assets, mapping data flows, and defining attacker capabilities. This produces a threat model detailing entry points, abuse paths, and prioritized mitigations with owners and target dates.

What is the best way to prioritize security mitigations for a new release?▼

The best way to prioritize security mitigations is to model abuse paths against assets and trust boundaries. This generates a prioritized mitigation plan with assigned owners, target dates, and a defined validation strategy.

When should I perform a threat modeling security review?▼

Perform a threat modeling security review when designing new architectures, evaluating major feature changes, or preparing releases. It is required whenever explicit security design validation is needed before implementation.

Can I use threat modeling to validate security design for new data flows?▼

Yes, you can apply threat modeling to validate security design for new data flows. The process maps assets and trust boundaries to identify potential abuse paths and document initial mitigations.