Conduct STRIDE threat modeling on system designs with data flows and trust boundaries.
npx skills add https://github.com/haabe/tic-tac-toe --skill threat-model-haabe
Please help me install this Agent Skill. Skill: threat-model Source: https://github.com/haabe/tic-tac-toe/tree/main/.claude/skills/threat-model Command: npx skills add https://github.com/haabe/tic-tac-toe --skill threat-model-haabe
Threat modeling helps security teams proactively identify and mitigate threats early in system or feature design.
Define the system scope, map the data flows, and perform a STRIDE threat assessment for each component and data flow.
High-intent search queries and answers about installing and using this skill.
STRIDE threat modeling secures system design by evaluating Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege risks across components to proactively identify and mitigate threats early.
To perform a STRIDE threat assessment, define your web app scope, draw data flow diagrams identifying actors and trust boundaries, then evaluate STRIDE threats for each component to produce a prioritized threat inventory with mitigations.
Threat modeling works for securing APIs and microservices by mapping their data flows and trust boundaries, then applying the STRIDE framework to evaluate specific threats and generate structured mitigations for each service.
The best way to identify trust boundaries during risk assessment is by drawing data flow diagrams that map actors, processes, and data stores, visually highlighting where data crosses security perimeters between different system components.
You need to map data flows before evaluating STRIDE threats because visualizing actors, processes, data stores, and trust boundaries provides the necessary structural context to accurately identify where spoofing, tampering, or information disclosure can occur.
jassicsGenerate Data Flow Diagrams with trust boundaries for STRIDE/PASTA threat modeling.
sendaifunMap data flows, trust boundaries, and component relationships in unfamiliar codebases.
jmaglyPerform security assessments with STRIDE threat modeling and CVSS scoring.
felixgeelhaarIdentify and analyze software threats using STRIDE, PASTA, and attack trees.
