threat-modeling

Identify and categorize security threats using the STRIDE methodology.

Updated Feb 3, 2026
One-click install
npx skills add https://github.com/dhruvinrsoni/agentskills-garden --skill threat-modeling-dhruvinrsoni
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/dhruvinrsoni/agentskills-garden/tree/main/skills/60-security/threat-modeling
Command: npx skills add https://github.com/dhruvinrsoni/agentskills-garden --skill threat-modeling-dhruvinrsoni

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically identifies potential security threats to a system or component, assesses their risk, and proposes actionable mitigations, ensuring a robust security posture.

Core Features & Use Cases

  • STRIDE Analysis: Identifies threats across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
  • Risk Assessment: Quantifies threat likelihood and impact to prioritize mitigation efforts.
  • Mitigation Planning: Maps identified threats to concrete security controls and implementation tasks.
  • Use Case: Before deploying a new user authentication service, use this Skill to proactively discover potential attack vectors like credential stuffing or unauthorized access, and define the necessary security controls.

Quick Start

Use the threat-modeling skill to identify threats for the new user authentication service.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is STRIDE threat modeling for software systems?

Threat modeling mitigates security vulnerabilities by assessing the likelihood and impact of identified STRIDE threats. It quantifies risk to prioritize mitigation efforts and maps threats to concrete security controls for implementation.

How do I identify security threats before deploying a new service?

Threat modeling addresses security vulnerabilities by proposing actionable mitigations and implementation tasks after identifying risks. It maps discovered threats to concrete security controls, ensuring a robust security posture for new components.

Can I perform a risk assessment for spoofing and tampering vulnerabilities?

Threat modeling handles information disclosure and denial of service vulnerabilities by systematically identifying them during security reviews. It assesses their risk based on likelihood and impact, proposing actionable mitigations and concrete security controls.

Does threat modeling require specific security frameworks to mitigate risks?

Threat modeling is suitable for a new user authentication service because it proactively discovers potential attack vectors like credential stuffing or unauthorized access. It defines necessary security controls through structured risk assessment and mitigation planning.