Generate prioritized STRIDE threat models from existing DFDs.
npx skills add https://github.com/me2resh/apexyard --skill threat-model-me2resh
Please help me install this Agent Skill. Skill: threat-model Source: https://github.com/me2resh/apexyard/tree/main/.claude/skills/threat-model Command: npx skills add https://github.com/me2resh/apexyard --skill threat-model-me2resh
This Skill helps you prevent security regressions by producing a point-in-time STRIDE threat catalogue grounded in your project’s Data Flow Diagram (DFD), including prioritized mitigations.
/launch-check shows WARN or FAIL for the security row.Run threat-model for your project by invoking /threat-model workspace/<project-path> to generate a prioritized STRIDE threat catalogue (and optionally a Threat Dragon JSON export).
High-intent search queries and answers about installing and using this skill.
STRIDE threat modeling identifies security risks by systematically applying Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege categories to each entry point and trust-boundary crossing in your architecture. It produces a prioritized catalogue of threats and mitigations.
Maintaining threat history involves persisting a structured audit artefact after each point-in-time security review, allowing you to render and track threat trends across repeated runs. This helps prevent security regressions by providing consistent enumeration over time.
Yes, you can export STRIDE threat models to OWASP Threat Dragon by generating a Threat Dragon v2 JSON file. This optional export allows you to load the generated threat catalogue into Threat Dragon for diagrammatic review and collaboration.
Yes, a Data Flow Diagram (DFD) is required before starting this threat modeling process. The DFD must be provided as a markdown file at the projects architecture path to anchor the STRIDE analysis to your project's specific trust boundaries and data flows.
You should run a STRIDE threat model analysis during pre-launch security reviews and as an ongoing practice for your apps and services. It is also designed as an expert companion to escalate security warnings identified during launch checks.
pvillegaApply STRIDE threat modeling with data flow diagrams and DREAD risk scores.
AAbdulghanyGenerate a STRIDE threat catalogue from a DFD snapshot and export Threat Dragon v2 JSON.
Envy-7zGenerates Markdown threat models from analyzed codebases and project paths.
williamzujkowskiApply STRIDE threat modeling and DREAD prioritization to identify security threats.