skills.rest
beekeeper-lab
beekeeper-labCOMMUNITY
Explore all skills by this author →
GitHub

threat-model

Identify and document STRIDE-based threats with risk ratings and mitigations.

1|Updated Feb 7, 2026
Search Tags:#architecture#security#threat-modeling#stride#mitigation#risk#threat-model
One-click install
npx skills add https://github.com/beekeeper-lab/foundry --skill threat-model-beekeeper-lab
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-model
Source: https://github.com/beekeeper-lab/foundry/tree/main/ai-team-library/claude/skills/threat-model
Command: npx skills add https://github.com/beekeeper-lab/foundry --skill threat-model-beekeeper-lab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling helps security engineers systematically identify and document STRIDE-based threats within a system architecture, enabling proactive risk management.

Core Features & Use Cases

  • STRIDE-based threat evaluation across trust boundaries and data flows.
  • Risk rating, mitigations, and a security test checklist generation.
  • Use Case: during architecture reviews of software systems, microservices, APIs, and data gateways to produce a repeatable threat model.

Quick Start

Provide the architecture documentation (or ADR) describing your system and run the threat-model to generate the full threat model, checklist, and summary.

Frequently Asked Questions about threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate threat modeling for a software architecture?▼

Automate threat modeling by providing your architecture documentation to generate a structured STRIDE-based threat model. It evaluates trust boundaries and data flows across API tiers to produce risk ratings, mitigations, and a verification checklist.

What is STRIDE-based threat evaluation for microservices?▼

STRIDE-based threat evaluation systematically identifies security threats across microservices, data flows, and trust boundaries. It helps security engineers document risks and apply proactive mitigation strategies during software architecture reviews.

How do I generate a security checklist from architecture documentation?▼

Generate a security checklist by running threat-model against your system architecture documentation. It analyzes component interactions and data gateways to output a structured security_checklist alongside risk ratings and a threat summary.

Can I use threat modeling for API tiers and data gateways?▼

Yes, threat modeling supports API tiers, services, and data gateways. It evaluates component interactions and trust boundaries to document risks and produce a repeatable threat model for software systems.

What do I need to start threat modeling for secure architectures?▼

You need architecture documentation or an ADR describing your software system. Providing this as input allows the threat-model process to evaluate your system and generate the full threat model, checklist, and summary.

Related Skills

Explore More Software Engineering Skills→
haabehaabe

threat-model

Conduct STRIDE threat modeling on system designs with data flows and trust boundaries.

Community
Advanced
abhiunixabhiunix
1

threat-model

Generate a STRIDE-based threat model from codebase and architecture analysis.

Community
Advanced
johngutierrez31johngutierrez31

threat-modeling-expert

Apply STRIDE threat analysis to system architecture diagrams.

Community
Advanced
patricio0312revpatricio0312rev
5

threat-model-generator

Generate STRIDE-based threat models with asset tagging and residual risk computation.

Community
Advanced