threat-model-dfd

Generate Data Flow Diagrams with trust boundaries for STRIDE/PASTA threat modeling.

6|Updated May 30, 2026

Search Tags:#security #threat modeling #system architecture #dfd #data flow diagram

Ready to run

npx skills add https://github.com/jassics/awesome-claude-security --skill threat-model-dfd

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: threat-model-dfd
Source: https://github.com/jassics/awesome-claude-security/tree/main/plugins/security-diagramming/skills/threat-model-dfd
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill threat-model-dfd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill addresses the challenge of manually creating Data Flow Diagrams (DFDs) for threat modeling, streamlining the process and ensuring the accuracy of trust boundaries and data flows.

Core Features & Use Cases

Automatic DFD Generation: Draws a DFD with trust boundaries, external entities, processes, data stores, and data flows.
Customizable Notation: Utilizes standard DFD notation for clarity and consistency.
Use Case: Perfect for initiating a STRIDE/PASTA threat model or documenting data flow through a system.

Quick Start

Use the threat-model-dfd skill to create a DFD for your system architecture.

Frequently Asked Questions about threat-model-dfd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I create a data flow diagram for threat modeling?▼

Creating a data flow diagram for threat modeling is done automatically by generating trust boundaries, external entities, processes, data stores, and data flows directly from your system architecture.

What is a DFD with trust boundaries used for in security?▼

A DFD with trust boundaries is used for security to visualize where data moves across different trust levels, helping to identify potential attack surfaces before applying frameworks like STRIDE or PASTA.

Can I use this to generate diagrams for a STRIDE threat model?▼

Yes, you can use this to generate diagrams for a STRIDE threat model because it explicitly supports identifying external entities and data flows required to initiate STRIDE or PASTA analysis.

What is the best way to document system architecture data flow for security analysis?▼

The best way to document system architecture data flow for security analysis is to generate a standardized DFD notation that clearly maps out processes and data stores within established trust boundaries.

Do I need to manually define external entities and data stores for my DFD?▼

You do not need to manually define external entities and data stores for your DFD because the skill automatically identifies and generates these components based on your system architecture description.