skills.rest
bcwgames
bcwgamesCOMMUNITY
Explore all skills by this author →
GitHub

threat_modeling

Identify security assets and trust boundaries to produce threat_model.md.

Updated Jan 6, 2026
Search Tags:#risk-assessment#threat-modeling#stride#trust-boundaries#security-analysis#threat-categories#security-guarantees
One-click install
npx skills add https://github.com/bcwgames/FNaF-TVE --skill threat-modeling-bcwgames
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat_modeling
Source: https://github.com/bcwgames/FNaF-TVE/tree/main/Five-Nights-At-Freddys-The-Virtual-Experience/.local/skills/threat_modeling
Command: npx skills add https://github.com/bcwgames/FNaF-TVE --skill threat-modeling-bcwgames

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyze a project's architecture to produce a security reference threat_model.md that documents assets, trust boundaries, applicable threat categories, and the security guarantees the project must uphold.

Core Features & Use Cases

  • Asset discovery: Identify and classify assets worth protecting (data, secrets, business information).
  • Trust boundary mapping: Map client/server, server/database, and external service boundaries.
  • Threat enumeration & guarantees: Apply a STRIDE-inspired approach to enumerate threats across spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege, and specify required guarantees.
  • Use Case: Use during a project kickoff or after significant architectural changes to ensure a formal security reference is maintained.

Quick Start

Run threat_modeling on the target codebase to generate a threat_model.md documenting assets, boundaries, threats, and guarantees.

Frequently Asked Questions about threat_modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a threat model for my software project?▼

A STRIDE threat model enumerates threats across spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. It maps these threats against identified assets and trust boundaries to document necessary security guarantees.

What is the best way to document security boundaries and assets for risk assessment?▼

You should perform security analysis and threat modeling during project kickoff or after significant architectural changes. This ensures a formal security reference is maintained before code is finalized or updated.

How do I apply STRIDE threat categories to identify security guarantees?▼

The threat modeling process outputs a threat_model.md file. This document clearly describes identified assets, trust boundaries, threat categories, and the formal security guarantees the project must uphold.

When do I need to perform a security analysis and update my threat model?▼

You need to perform security analysis and threat modeling during a project kickoff or after significant architectural changes. This ensures a formal security reference is maintained as the system evolves.

Related Skills

Explore More Software Engineering Skills→
josemlopezjosemlopez
8

tm-init

Analyze architecture documentation to generate asset inventories, data flows, trust boundaries, and attack surface mappings.

Community
Intermediate
darelabs-techdarelabs-tech

dare-security

Integrate security validation gates into the DARE development lifecycle.

Official
Advanced
phatblatphatblat
12

WebAssessment

Automate web application security assessments with reconnaissance, threat modeling, and vulnerability analysis.

Community
Advanced
yocxy2yocxy2

cso

Automate security audits and threat modeling for software repositories.

Community
Advanced