Generate STRIDE-based threat models for software features and modules.
npx skills add https://github.com/mbwsims/claude-universe --skill threat-model-mbwsims
Please help me install this Agent Skill. Skill: threat-model Source: https://github.com/mbwsims/claude-universe/tree/main/skills/threat-model Command: npx skills add https://github.com/mbwsims/claude-universe --skill threat-model-mbwsims
This skill helps security-conscious teams generate structured threat models for a feature or module using the STRIDE methodology, enabling early identification of assets, threats, and mitigations to reduce risk.
Provide the target feature or module and I will generate a STRIDE-based threat model for it.
High-intent search queries and answers about installing and using this skill.
Generate a threat model for a web app feature by mapping data flows, trust boundaries, and entry points, then applying the STRIDE methodology to document threats, mitigations, and residual risk. The skill structures this assessment for actionable security guidance.
STRIDE threat modeling is a structured methodology categorizing security risks into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. Use it during software design or pre-release phases to identify assets and mitigate threats early.
Identify the attack surface for an API or service by enumerating external interactions, entry points, and data flows across trust boundaries. The skill maps these elements to apply STRIDE categories and assess likelihood and impact for each threat.
Yes, you can use this for pre-release security analysis of software designs. The skill assesses features or modules during the design phase, documenting assets, attack surfaces, and enumerated threats with likelihood, impact, and mitigations to reduce risk before release.
The best way to prioritize security risks across services is applying STRIDE categories to enumerated threats and analyzing them by likelihood and impact. This skill documents mitigations and residual risk, enabling structured risk prioritization for web apps and APIs.
Document trust boundaries and assets for a module by identifying the target context, data handled, and actors. The skill structures this documentation alongside attack surfaces and STRIDE threat enumerations to produce a concise security assessment summary.
jwm-axoniDefine system scope, assets, entry points, and STRIDE threats for a threat model document.
farmountainIdentify security threats and assess risks using STRIDE for system architectures.
balic-AI-ML-R-D-ResourcesMap and analyze application entry points to assess security risk.
Logos-LiberGuide threat modeling with STRIDE, PASTA, and LINDDUN frameworks.
