skills.rest
javiertelioz
javierteliozCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

threat-model-analyst

Analyzes security threats in repositories and systems using STRIDE-A, generating threat models and findings reports.

Updated Mar 16, 2026
Search Tags:#threat-modeling#threat-model#security-analysis#incremental-analysis#dfd#stride-a
One-click install
npx skills add https://github.com/javiertelioz/my-personal-marketplace --skill threat-model-analyst-javiertelioz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-model-analyst
Source: https://github.com/javiertelioz/my-personal-marketplace/tree/main/plugins/threat-model-analyst/skills/threat-model-analyst
Command: npx skills add https://github.com/javiertelioz/my-personal-marketplace --skill threat-model-analyst-javiertelioz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

threat-model-analyst automates comprehensive STRIDE-A threat modeling for repositories and systems, generating architecture overviews, DFD diagrams, heatmaps, findings, and executive assessments, while supporting incremental analyses against baselines.

Core Features & Use Cases

  • Full threat modeling in two modes: single analysis and incremental updates with change tracking.
  • Generates architecture views, DFDs, STRIDE-A analysis, prioritized findings, and executive assessments.
  • Supports embedded HTML comparison and STRIDE heatmaps to help trace changes over time.

Quick Start

Run the threat-model-analyst on a repository to produce a complete threat-model report; optionally specify a baseline to perform an incremental update.

Frequently Asked Questions about threat-model-analyst

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate STRIDE-A threat modeling for a code repository?▼

Automate STRIDE-A threat modeling by running this skill on a repository to generate architecture overviews, DFD diagrams, threat inventories, and executive assessment files. It loads necessary references and templates to produce structured analysis outputs automatically.

What is incremental threat modeling and how does change tracking work?▼

Incremental threat modeling compares a current repository analysis against a previous baseline to surface only new security threats. It generates embedded HTML comparisons and STRIDE heatmaps to visually trace security posture changes over time.

How do I generate a Data Flow Diagram for security analysis?▼

Generate a security Data Flow Diagram by executing the threat modeling skill, which automatically maps repository architecture into DFD visualizations. These diagrams serve as the structural baseline for identifying STRIDE-A vulnerabilities.

Can I perform a single threat model analysis without a prior baseline?▼

Yes, you can perform a complete single-analysis threat model without a baseline. The skill operates in two modes, allowing a standalone comprehensive assessment or an incremental update comparing against an existing baseline.

What outputs do I get from a STRIDE-A security analysis?▼

A STRIDE-A security analysis produces an executive assessment file, a detailed STRIDE analysis document, a prioritized findings report, and a structured threat inventory in JSON format for integration into tracking systems.

Does threat modeling work with embedded HTML for tracking security changes?▼

Yes, incremental threat modeling supports embedded HTML comparisons to track security changes. It generates visual STRIDE heatmaps and comparison views that highlight specific architectural and threat modifications between baseline updates.

Related Skills

Explore More Software Engineering Skills→
not-subhunot-subhu

threat-modeling

Generate a security reference document using STRIDE threat modeling.

Community
Advanced
burgebjburgebj

octopus-security-audit

Detect software security vulnerabilities through automated security review and adversarial testing workflows.

Community
Advanced
usermaumusermaum

security-pipeline

Detect security vulnerabilities in code changes using CWE and STRIDE methodologies.

Community
Advanced
dandudzidandudzi
2

stride-analysis-patterns

Enumerate STRIDE threats, construct DFDs, score risks with DREAD, and map mitigations.

Community
Advanced