threat.model.generate

Name: threat.model.generate
Availability: InStock
Author: epieczko

Generate STRIDE-based threat models with CVSS risk scoring and mitigation recommendations.

2|Updated Oct 22, 2025

Search Tags:#STRIDE #mitigation #CVSS #risk #threat-model

Ready to run

npx skills add https://github.com/epieczko/betty --skill threat-model-generate

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: threat.model.generate
Source: https://github.com/epieczko/betty/tree/main/skills/threat.model.generate
Command: npx skills add https://github.com/epieczko/betty --skill threat-model-generate

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Produces STRIDE-based threat models with risk scoring and mitigation recommendations.

Core Features & Use Cases

Generate threat model YAML with STRIDE approach
Compute CVSS risk scores and mitigation suggestions

Quick Start

python skills/threat.model.generate/threat_model_generate.py

Frequently Asked Questions about threat.model.generate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a STRIDE threat model for my system architecture?▼

STRIDE threat modeling systematically identifies security threats by categorizing them into six categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. Provide your system architecture description, and the Skill generates a threat model in YAML format with identified threats, CVSS risk scores, and mitigation recommendations for design-time security planning.

What inputs do I need to create a threat model with CVSS scoring?▼

A system description is mandatory; optional inputs include data flows, trust boundaries, assets, compliance frameworks, and risk tolerance levels. The Skill outputs a threat model file with threat counts, high-risk threat counts, and a coverage report showing which system components and data flows are analyzed.

Can I use threat modeling for compliance and security planning reviews?▼

Yes. STRIDE threat modeling with CVSS risk scoring supports both design-time threat identification and compliance reviews. You can specify frameworks beyond the default STRIDE approach, set risk tolerance thresholds, and generate mitigation recommendations aligned with your security and compliance requirements.

What does a CVSS risk score tell me about threats in my architecture?▼

CVSS (Common Vulnerability Scoring System) risk scores quantify threat severity on a standardized scale, helping prioritize mitigation efforts. The Skill assigns scores to each identified threat, distinguishing high-risk threats from lower-priority ones so you can allocate resources to the most critical security gaps.

How does trust boundary and data flow analysis improve threat modeling?▼

Defining trust boundaries and data flows in your system description allows the Skill to identify threats specific to inter-component communication and privilege transitions. This detailed input produces more precise threat coverage and targeted mitigations than architecture description alone.

What output formats does the threat model generate?▼

The Skill generates a threat model in YAML format, which can be saved to a specified output path. The YAML file contains the full threat model structure, threat details with CVSS scores, mitigation suggestions, and a coverage report summarizing analyzed components and data flows.