skills.rest
BagelHole
BagelHoleCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

threat-modeling

Conduct STRIDE-based threat modeling to identify and mitigate security risks in system designs.

46|4|Updated Jan 27, 2026
Search Tags:#security#threat modeling#STRIDE#risk assessment#vulnerability management#secure design
One-click install
npx skills add https://github.com/BagelHole/DevOps-Security-Agent-Skills --skill threat-modeling-bagelhole
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/BagelHole/DevOps-Security-Agent-Skills/tree/main/security/operations/threat-modeling
Command: npx skills add https://github.com/BagelHole/DevOps-Security-Agent-Skills --skill threat-modeling-bagelhole

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you proactively identify and address potential security threats in your systems during the design phase, preventing costly vulnerabilities later on.

Core Features & Use Cases

  • STRIDE Methodology: Systematically identify threats related to Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
  • Risk Assessment: Prioritize threats based on likelihood and impact.
  • Mitigation Planning: Design and document countermeasures for identified risks.
  • Use Case: When designing a new microservice, use this Skill to walk through the STRIDE model, identify potential attack vectors, and define security controls before writing any code.

Quick Start

Use the threat-modeling skill to identify threats for a new web application using the STRIDE methodology.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is threat modeling using the STRIDE methodology?▼

Threat modeling using the STRIDE methodology systematically identifies security risks by evaluating system architecture for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege vulnerabilities.

How do I identify security threats during system design?▼

Identify security threats during system design by analyzing data flows and potential attack vectors through a structured risk assessment, allowing you to proactively document countermeasures before writing any code.

When should I conduct a security risk assessment for a new microservice?▼

Conduct a security risk assessment for a new microservice during the design phase to evaluate system architecture, identify potential attack vectors, and define security controls before implementation begins.

Can I use this threat modeling approach for secure design reviews?▼

Yes, you can use this threat modeling approach for secure design reviews and application security assessments to prioritize threats based on likelihood and impact, and design mitigation plans.

What do I need to assess vulnerabilities using STRIDE?▼

Assessing vulnerabilities using STRIDE requires an understanding of your system architecture, data flows, and potential attack vectors to accurately identify and mitigate security risks during software development lifecycle reviews.

Related Skills

Explore More Software Engineering Skills→
YSheldonYSheldon

threat_modeling

Generate a formal threat_model.md by enumerating assets, trust boundaries, and STRIDE categories.

Community
Advanced
tense-itense-i
1

threat-mitigation-mapping

Map security threats to corresponding controls using Python dataclasses and enums.

Community
Advanced
somachaksomachak

threat-modeling-features

Identify security threats and mitigations in features using STRIDE framework.

Community
Intermediate
rsmdtrsmdt
381

security-assessment

Conduct security assessments on code, architecture, and infrastructure using STRIDE threat modeling.

Community
Advanced