threat-modeling

Name: threat-modeling
Availability: InStock
Author: fr33d3m0n

Generate structured YAML phase data and Markdown reports for threat modeling workflows.

329|41|Updated Jan 3, 2026

Search Tags:#risk-assessment #threat-modeling #knowledge-base #ai-assisted #security-design #dfd

Ready to run

npx skills add https://github.com/fr33d3m0n/threat-modeling --skill threat-modeling-fr33d3m0n

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/fr33d3m0n/threat-modeling/tree/main
Command: npx skills add https://github.com/fr33d3m0n/threat-modeling --skill threat-modeling-fr33d3m0n

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, requests, sqlite3, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

AI-native automated threat modeling enables comprehensive security risk assessments for software projects by providing a structured, AI-assisted workflow that translates architecture into actionable security plans.

Core Features & Use Cases

8-phase threat modeling workflow with automated DFDs, trust boundary analysis, STRIDE threat enumeration, and mitigation planning.
Integrated knowledge bases and KB querying for CWE/CAPEC/ATT&CK mappings and verification standards (WSTG/MASTG/ASVS).
CI/CD-ready outputs: YAML data blocks and Markdown reports for auditability and reporting.

Quick Start

Launch Claude Code in your target project and run '/threat-model @your-project' to start the 8-phase threat modeling workflow.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate threat modeling and risk assessment for my software project?▼

Threat modeling with STRIDE works by running an AI-assisted workflow that enumerates threats and maps them to CWE, CAPEC, and ATT&CK knowledge bases. It then generates mitigation plans and verification standards like WSTG and ASVS for your architecture.

How do I integrate threat modeling into a CI/CD pipeline?▼

To integrate threat modeling into CI/CD, use a workflow that outputs structured YAML data blocks and Markdown reports. These formats enable automated security audits and continuous reporting directly within your deployment pipelines.

Can I generate Data Flow Diagrams and trust boundary analysis automatically?▼

Yes, you can automatically generate Data Flow Diagrams (DFDs) and perform trust boundary analysis. The 8-phase workflow handles DFD generation, STRIDE threat enumeration, and mitigation planning directly from your project architecture.

Do I need to provide architecture diagrams to start the threat modeling workflow?▼

You do not need to provide manual diagrams; the workflow is code-first. Launch the tool in your target project directory, and it automatically translates your existing architecture into DFDs and structured YAML threat models.

What knowledge bases are used for mapping security threats and verification?▼

The workflow queries integrated knowledge bases to map threats against CWE, CAPEC, and ATT&CK frameworks. It also references security verification standards including WSTG, MASTG, and ASVS during the mitigation planning phase.