skills.rest
ensingm2
ensingm2COMMUNITY
Explore all skills by this author →
WebsiteGitHub

threat-modeler

Apply STRIDE, MITRE ATT&CK, and Kill Chain frameworks to identify and model security threats.

12|4|Updated Nov 6, 2025
Search Tags:#STRIDE#risk-assessment#threat-modeling#Kill-Chain#mitigations#MITRE-ATT&CK
One-click install
npx skills add https://github.com/ensingm2/AI-threat-modeling-rulesets --skill threat-modeler
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-modeler
Source: https://github.com/ensingm2/AI-threat-modeling-rulesets/tree/main/.ai-instructions/skills/threat-modeler
Command: npx skills add https://github.com/ensingm2/AI-threat-modeling-rulesets --skill threat-modeler

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security threat identification and risk assessment using STRIDE, MITRE ATT&CK, and Cyber Kill Chain for stages 3-6, with structured outputs and risk-driven mitigations.

Core Features & Use Cases

  • Threat Identification: Systematically list STRIDE threats and map to ATT&CK and Kill Chain.
  • Risk Assessment: Qualitative ratings (CRITICAL/HIGH/MEDIUM/LOW) with justification.
  • Mitigation Strategy: Map controls and phased implementation aligned to risk.

Quick Start

Run Stage 3 threat identification on the target system and review Stage 4-6 outputs to generate mitigations and final report.

Frequently Asked Questions about threat-modeler

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I apply STRIDE threat modeling to identify security threats in my system?▼

STRIDE threat modeling systematically categorizes threats into six categories—Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege—to identify and document security weaknesses across system components and data flows.

Can I map security threats to MITRE ATT&CK techniques and Kill Chain stages?▼

Yes. This Skill maps identified STRIDE threats to MITRE ATT&CK techniques and Cyber Kill Chain stages, creating traceability from threat identification through attack progression so you can align defenses to attacker tactics.

What's the best way to generate risk assessments and mitigation strategies from threat models?▼

After identifying threats in stages 3–4, assign qualitative risk ratings (CRITICAL, HIGH, MEDIUM, LOW) with justification, then map security controls and phased implementation plans to each threat, producing JSON and Markdown outputs for stakeholder review.

Do I need input from earlier threat modeling stages to use this Skill?▼

Yes. This Skill operates on stages 3–6 of threat modeling and requires inputs from stages 1–2 (system definition and data flow diagrams) to systematically identify and assess threats against your target system.

What outputs does threat modeling produce for reporting to stakeholders?▼

Threat modeling generates threat inventories mapped to STRIDE categories, risk assessments with justifications, mitigation strategies with implementation phases, and final stakeholder reports in both JSON and Markdown formats for communication and tracking.

Related Skills

Explore More Software Engineering Skills→
josemlopezjosemlopez
8

tm-init

Analyze architecture documentation to generate asset inventories, data flows, trust boundaries, and attack surface mappings.

Community
Intermediate
GuicedEEGuicedEE
5

security-compliance

Document security controls and compliance evidence for regulatory frameworks.

Official
Intermediate
Andrejr82Andrejr82

vulnerability-scanner

Analyze vulnerabilities using OWASP 2025 and supply chain security principles.

Community
Advanced
48Nauts-Operator48Nauts-Operator
3

attack-tree-construction

Build attack trees with OR/AND/LEAF nodes and threat attributes.

Community
Advanced