Generate a STRIDE threat catalogue from a DFD snapshot and export Threat Dragon v2 JSON.
npx skills add https://github.com/AAbdulghany/fms --skill threat-model-aabdulghany
Please help me install this Agent Skill. Skill: threat-model Source: https://github.com/AAbdulghany/fms/tree/main/.claude/skills/threat-model Command: npx skills add https://github.com/AAbdulghany/fms --skill threat-model-aabdulghany
Threat modelling at project launch is hard without a structured approach to identify and mitigate security threats early.
Run /dfd to generate the DFD snapshot, then run /threat-model to produce a threat catalogue and export Threat Dragon JSON.
High-intent search queries and answers about installing and using this skill.
To generate a STRIDE threat model from a DFD, run the threat-model command after creating your DFD snapshot at projects/.../architecture/dfd.md. It analyzes entry points, data stores, trust boundaries, and flows to produce a structured threat catalogue with mitigations.
STRIDE threat modelling is a structured approach to identify and mitigate security threats early at project launch. You need it when you lack a structured method to analyze threats across entry points, data stores, trust boundaries, and data flows.
Yes, threat modelling supports Threat Dragon v2 JSON exports for integration with security tooling. It attaches identified threats to parent components like actors and processes, formatting the output specifically for Threat Dragon compatibility.
To prepare a DFD snapshot for a security audit, generate your Data Flow Diagram at the projects/.../architecture/dfd.md path. Once this DFD snapshot exists, you can run threat-model to produce a self-contained audit artefact for PR reviews.
The best way to prioritize security risks from a data flow diagram is to run threat-model after generating your DFD. It produces a prioritized risk report with mitigations by analyzing trust boundaries, data stores, and flows using the STRIDE methodology.
me2reshGenerate prioritized STRIDE threat models from existing DFDs.
dhruvinrsoniIdentify and categorize security threats using the STRIDE methodology.
Jesse-L-MAudit infrastructure, dependencies, and AI tooling with a 14-phase security workflow.
hbvg234Identify and document security threats using STRIDE across system components.
