Analyze system designs with STRIDE and generate DFD-based threat models.
npx skills add https://github.com/curphey/bosun --skill threat-model-curphey
Please help me install this Agent Skill. Skill: threat-model Source: https://github.com/curphey/bosun/tree/main/skills/threat-model Command: npx skills add https://github.com/curphey/bosun --skill threat-model-curphey
Threat modeling provides a structured approach to identify, evaluate, and mitigate security risks during design, reducing the likelihood of design-level vulnerabilities.
Define the system boundary, map data flows with a simple DFD, and apply STRIDE across components.
High-intent search queries and answers about installing and using this skill.
Threat modeling is a structured approach to identify, evaluate, and mitigate security risks early in design. Apply it during feature design, architecture reviews, and security risk assessments across data flows, authentication, and third-party integrations to reduce design-level vulnerabilities.
To perform STRIDE analysis, first define the system boundary and map data flows using a Data Flow Diagram. Then apply STRIDE across each component to identify threats, document mitigations, and ensure traceable remediation for the identified security issues.
Yes, threat modeling supports building threat trees and attack trees with risk scoring using both DREAD and CVSS methodologies. This allows you to evaluate and prioritize identified security risks systematically across your architecture components and data flows.
Map trust boundaries by defining the system boundary and mapping data flows with a Data Flow Diagram. This identifies where data crosses between trusted and untrusted zones, allowing targeted STRIDE analysis and documented mitigations for authentication and integration risks.
Yes, threat modeling supports security design reviews, risk assessments, and compliance mapping. It provides actionable mitigations and traceable remediation tracking across architectures to systematically manage and document security design compliance.
jassicsGenerate Data Flow Diagrams with trust boundaries for STRIDE/PASTA threat modeling.
theandyalvarez7-rubyPerform STRIDE threat analysis and generate risk-scored threat model reports.
YSheldonGenerate a formal threat_model.md by enumerating assets, trust boundaries, and STRIDE categories.
Logos-LiberGuide threat modeling with STRIDE, PASTA, and LINDDUN frameworks.
