threat-modeling

Apply STRIDE to enumerate threats, score risks, and map mitigations.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/ashwnn/agent-config --skill threat-modeling-ashwnn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/ashwnn/agent-config/tree/main/skills/threat-modeling
Command: npx skills add https://github.com/ashwnn/agent-config --skill threat-modeling-ashwnn

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling helps teams identify, assess, and mitigate security risks early in the design lifecycle.

Core Features & Use Cases

  • STRIDE-based threat enumeration for system components and data flows.
  • Risk scoring and mitigations mapping to actionable security controls.
  • Quick-start checklists for new features or audits with structured outputs.

Quick Start

Analyze a new feature's security posture by applying STRIDE to its components and data flows and produce a mitigations plan.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is STRIDE threat modeling and when should I apply it?

STRIDE threat modeling is a structured technique to identify and mitigate security risks by categorizing threats like spoofing and tampering. You should apply it during system design, security audits, or before shipping new APIs and data pipelines.

How do I perform a security audit for a new API using threat modeling?

To perform a security audit for a new API, apply the STRIDE framework to enumerate threats across its components and data flows. This process generates risk scores and maps them to concrete, actionable security mitigations.

Can threat modeling help assess risks before shipping new data integrations?

Yes, threat modeling can assess risks before shipping new data integrations. By applying STRIDE to the integration's data flows, you enumerate potential security threats and produce a structured mitigations plan to implement controls.

What is the best way to map security mitigations to identified risks?

The best way to map security mitigations to identified risks is through structured threat enumeration using STRIDE. This approach scores each identified risk and directly aligns it with actionable security controls and design modifications.

Does this threat modeling approach work for auditing existing system features?

Yes, this threat modeling approach works for auditing existing system features. You can apply STRIDE to current components and data flows to generate a quick-start checklist that identifies gaps in your existing security design.

How does risk scoring work in a STRIDE-based security design assessment?

Risk scoring in a STRIDE-based security design assessment evaluates the severity and likelihood of enumerated threats across system components. It outputs structured scores that prioritize which security mitigations to implement first.