Threat Model

Analyze proposed features with STRIDE threat modeling and generate risk tables.

1|1|Updated Feb 21, 2026

Search Tags:#security #vulnerability #threat modeling #STRIDE #risk assessment #mitigation

Ready to run

npx skills add https://github.com/dtsong/claude-code-windows-setup --skill threat-model-dtsong

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Threat Model
Source: https://github.com/dtsong/claude-code-windows-setup/tree/main/skills/council/skeptic/threat-model
Command: npx skills add https://github.com/dtsong/claude-code-windows-setup --skill threat-model-dtsong

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify potential security vulnerabilities and risks in proposed features by applying the STRIDE threat modeling methodology.

Core Features & Use Cases

STRIDE Analysis: Systematically analyzes threats across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
Risk Assessment: Rates identified threats based on likelihood and impact.
Mitigation Planning: Proposes specific, actionable steps to address identified risks.
Use Case: Before launching a new user authentication system, use this Skill to proactively identify potential attack vectors and ensure robust security measures are in place.

Quick Start

Apply STRIDE threat modeling to the proposed feature described in the attached document 'new-auth-flow.md'.

Frequently Asked Questions about Threat Model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform STRIDE threat modeling for a new software feature?▼

STRIDE threat modeling analyzes proposed features by evaluating Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege risks. It systematically identifies security vulnerabilities, rates threats by likelihood and impact, and recommends specific mitigations.

What is the best way to identify security vulnerabilities before launching a feature?▼

Identifying security vulnerabilities before launch requires analyzing trust boundaries and enumerating data flows within the proposed feature. This process generates a comprehensive threat table and a residual risk summary to ensure robust security measures are proactively implemented.

Can I use automated threat modeling to assess risk likelihood and impact?▼

Yes, automated threat modeling assesses risk likelihood and impact by applying the STRIDE methodology to your feature descriptions. It systematically rates identified threats and proposes actionable mitigation steps to address potential attack vectors.

How do I mitigate information disclosure and spoofing risks in an authentication flow?▼

To mitigate information disclosure and spoofing risks in an authentication flow, apply STRIDE analysis to identify specific attack vectors across trust boundaries. The analysis proposes actionable mitigation steps and generates a residual risk summary for security-conscious development.

Does threat modeling generate a residual risk summary for proposed features?▼

Yes, threat modeling generates a residual risk summary for proposed features. After analyzing data flows and rating threats by likelihood and impact, it provides a comprehensive threat table detailing remaining risks and recommended mitigations.