Threat Model Generation Skill

What problem does it solve?

It helps you identify and document realistic security threats in AWS infrastructure described by Infrastructure-as-Code (IaC), so you can reason about risk before deployment and produce structured, framework-aligned threat models.

Core Features & Use Cases

• Framework-aligned threat modeling: Produces threats mapped to STRIDE, OWASP Top 10 (2021), MITRE ATT&CK, and CWE for consistent security analysis and reporting.
• Actionable, structured outputs: Generates a JSON threat model containing affected components, impact (CIA), likelihood, attacker/defender perspectives, and concrete recommendations.
• IaC-to-model workflow: Reads CDK, CloudFormation, or Terraform code, analyzes it with an LLM, and saves results to a standardized threat-model.json format for downstream evaluation.

Quick Start

Run the skill with your IaC file path to generate a threat-model.json containing multiple AWS threats with framework mappings and mitigation recommendations.