skills.rest
adrien-barret
adrien-barretCOMMUNITY
Explore all skills by this author →
𝕏@AtemisLabGitHub

threat-model

Identify STRIDE threats across application architecture and document mitigations.

8|4|Updated Feb 7, 2026
Search Tags:#architecture#risk-assessment#threat-modeling#stride#mitigations#security-analysis#app-security
One-click install
npx skills add https://github.com/adrien-barret/claude-kit --skill threat-model-adrien-barret
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-model
Source: https://github.com/adrien-barret/claude-kit/tree/main/project-template/.claude/skills/security/threat-model
Command: npx skills add https://github.com/adrien-barret/claude-kit --skill threat-model-adrien-barret

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security-minded engineers identify STRIDE-based threats across an application's architecture, revealing spoofing, tampering, repudiation, information disclosure, DoS, and elevation-of-privilege risks.

Core Features & Use Cases

  • Structured threat analysis: Map assets, trust boundaries, and data flows to surface security gaps.
  • Threat categorization & mitigation: Classify threats by STRIDE and propose concrete mitigations.
  • Use Case: For a new web service, generate a threat model document that lists threats per component and recommended controls.

Quick Start

Run a starter threat-model against your architecture to generate a threat catalog for review.

Frequently Asked Questions about threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform STRIDE threat modeling for application architecture?▼

STRIDE threat modeling maps application assets, trust boundaries, and data flows to categorize spoofing, tampering, repudiation, information disclosure, DoS, and elevation of privilege risks, producing actionable mitigations.

How do I identify security risks across data flows and trust boundaries?▼

Identify security risks by analyzing data flows and trust boundaries to surface threat categories like information disclosure and elevation of privilege, then document recommended controls and risk levels.

Can I generate a threat model document for a new web service?▼

Yes, you can generate a threat model document for a new web service that lists identified threats per component, categorizes them by STRIDE, and proposes concrete mitigations for security review.

How do I document mitigations and risk levels for application security threats?▼

Document mitigations and risk levels by enforcing structured threat-analysis steps that classify threats by STRIDE categories and record actionable mitigations, risk levels, and status for each application component.

Does threat modeling work for assessing risk in existing application architectures?▼

Threat modeling works for existing application architectures by analyzing current asset maps and data flows to surface security gaps, categorize threats by STRIDE, and document recommended security controls.

Related Skills

Explore More Software Engineering Skills→
YSheldonYSheldon

threat_modeling

Generate a formal threat_model.md by enumerating assets, trust boundaries, and STRIDE categories.

Community
Advanced
jerelvelardejerelvelarde
6

create-threat-model

Generate STRIDE threat models with trust boundaries and prioritized mitigations.

Community
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
devkenidevkeni
1

threat-modeling

Identify and analyze security threats in software architectures using STRIDE, PASTA, and Attack Trees.

Community
Advanced