threat-model

Orchestrate an 11-step threat modeling workflow with local-first model creation.

2|Updated Feb 26, 2026

Search Tags:#threat modeling #security analysis #MITRE ATT&CK #D3FEND #graph structures

Ready to run

npx skills add https://github.com/dether-net/dethernety-oss --skill threat-model-dether-net

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: threat-model
Source: https://github.com/dether-net/dethernety-oss/tree/main/apps/dethereal/skills/threat-model
Command: npx skills add https://github.com/dether-net/dethernety-oss --skill threat-model-dether-net

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of threat modeling, guiding users through a structured workflow to identify and analyze potential security vulnerabilities.

Core Features & Use Cases

End-to-End Workflow: Walks users through the complete 11-step threat modeling workflow.
Local-First Approach: Allows model creation and editing on disk before syncing to the platform.
Customizable Modules: Supports custom modules for building domain-specific component classes, analysis logic, and security controls.

Quick Start

To start a new threat modeling project, run the following command:

/dethereal:threat-model

Frequently Asked Questions about threat-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate threat modeling for complex software architectures?▼

Automate threat modeling by orchestrating an 11-step workflow with specialized subagents for discovery, enrichment, and validation. It analyzes complex architectures using graph structures without requiring manual scripts or external security tools.

What is the best way to structure security analysis using MITRE ATT&CK and D3FEND frameworks?▼

Structure security analysis using MITRE ATT&CK and D3FEND frameworks by mapping complex architectures into graph structures. This approach guides discovery and validation subagents to identify vulnerabilities and map defenses systematically throughout the workflow.

Can I create and edit threat models locally before syncing them to a platform?▼

You can create and edit threat models locally on disk before syncing them. This local-first approach ensures model integrity and allows offline security analysis before finalizing the architecture review on the platform.

How do I start a security analysis workflow without installing manual scripts or tools?▼

Start a security analysis workflow by running the core threat modeling command. The system orchestrates the complete 11-step process automatically, deploying subagents for discovery and validation without requiring manual script installations.

Does this threat modeling approach support custom modules for domain-specific security controls?▼

Threat modeling supports custom modules for building domain-specific component classes, analysis logic, and security controls. This allows you to tailor the security analysis workflow to specific architectural requirements and specialized threat scenarios.

When should I use graph structures for security analysis of complex architectures?▼

Use graph structures for security analysis when modeling complex architectures with interconnected components. This approach allows specialized subagents to effectively discover, enrich, and validate threats across intricate system relationships during the threat modeling workflow.