threat-model-generation

What problem does it solve?

This Skill assists security teams and software engineers in generating a STRIDE-based threat model for a repository, enabling proactive risk assessment and structured security planning.

Core Features & Use Cases

• Threat modeling workflow: Analyze architecture, data flows, and interfaces to identify STRIDE threats.
• Output artifacts: Produce a documented threat model suitable for reviews and audits.
• Use Case: When a new repository is created or major architecture changes are introduced, generate a threat model to guide mitigations and security testing.
• Use Case: Periodic security audits or SOC/GDPR/industry-compliance reviews to ensure ongoing risk coverage.

Quick Start

To generate a threat model for your repo, run the threat-model-generation skill against the repository root and review the resulting .factory/threat-model.md.