stride-analysis-patterns

Identify security threats across STRIDE categories for system threat modeling.

Updated Jul 8, 2026
One-click install
npx skills add https://github.com/PriyanshKuniyal/gemini-cli-resources --skill stride-analysis-patterns-priyanshkuniyal
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: stride-analysis-patterns
Source: https://github.com/PriyanshKuniyal/gemini-cli-resources/tree/main/extensions/claude-code-workflows/plugins/security-scanning/skills/stride-analysis-patterns
Command: npx skills add https://github.com/PriyanshKuniyal/gemini-cli-resources --skill stride-analysis-patterns-priyanshkuniyal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a structured approach to identify threats using the STRIDE methodology, enhancing security analysis, threat modeling, and documentation.

Core Features & Use Cases

  • STRIDE Methodology: Apply the STRIDE categories to systematically identify threats in system security.
  • Threat Analysis: Conduct threat analysis for spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.
  • Templates and Examples: Offers templates and worked examples for creating threat model documents and code.

Quick Start

Run the stride-analysis-patterns skill to initiate a STRIDE threat analysis for your system.

Frequently Asked Questions about stride-analysis-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling using the STRIDE methodology?

Threat modeling using the STRIDE methodology systematically identifies security risks by evaluating system components against spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege categories.

What is STRIDE analysis for system security?

STRIDE analysis is a structured security assessment methodology that categorizes system threats into spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege to enhance threat identification.

How do I identify spoofing and tampering threats during risk assessment?

Identify spoofing and tampering threats during risk assessment by applying the STRIDE methodology to systematically evaluate system components for unauthorized identity access and data modification vulnerabilities.

Can I generate threat model documents for system security analysis?

Yes, you can generate threat model documents for system security analysis using provided templates and worked examples that map STRIDE categories to your specific system architecture.

Do I need prior security knowledge to use STRIDE for threat identification?

Yes, effective threat identification using STRIDE requires an understanding of the methodology's categories and their application to different system components within your architecture.

What's the best way to analyze elevation of privilege and denial of service threats?

The best way to analyze elevation of privilege and denial of service threats is systematically applying the STRIDE methodology to evaluate component boundaries and access controls.