skills.rest
fr33d3m0n
fr33d3m0nCOMMUNITY
Explore all skills by this author →
GitHub

threat-modeling

Generate structured YAML phase data and Markdown reports for threat modeling workflows.

329|41|Updated Jan 3, 2026
Search Tags:#risk-assessment#threat-modeling#knowledge-base#ai-assisted#security-design#dfd
One-click install
npx skills add https://github.com/fr33d3m0n/threat-modeling --skill threat-modeling-fr33d3m0n
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/fr33d3m0n/threat-modeling/tree/main
Command: npx skills add https://github.com/fr33d3m0n/threat-modeling --skill threat-modeling-fr33d3m0n

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, requests, sqlite3, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

AI-native automated threat modeling enables comprehensive security risk assessments for software projects by providing a structured, AI-assisted workflow that translates architecture into actionable security plans.

Core Features & Use Cases

  • 8-phase threat modeling workflow with automated DFDs, trust boundary analysis, STRIDE threat enumeration, and mitigation planning.
  • Integrated knowledge bases and KB querying for CWE/CAPEC/ATT&CK mappings and verification standards (WSTG/MASTG/ASVS).
  • CI/CD-ready outputs: YAML data blocks and Markdown reports for auditability and reporting.

Quick Start

Launch Claude Code in your target project and run '/threat-model @your-project' to start the 8-phase threat modeling workflow.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate threat modeling and risk assessment for my software project?▼

Threat modeling with STRIDE works by running an AI-assisted workflow that enumerates threats and maps them to CWE, CAPEC, and ATT&CK knowledge bases. It then generates mitigation plans and verification standards like WSTG and ASVS for your architecture.

How do I integrate threat modeling into a CI/CD pipeline?▼

To integrate threat modeling into CI/CD, use a workflow that outputs structured YAML data blocks and Markdown reports. These formats enable automated security audits and continuous reporting directly within your deployment pipelines.

Can I generate Data Flow Diagrams and trust boundary analysis automatically?▼

Yes, you can automatically generate Data Flow Diagrams (DFDs) and perform trust boundary analysis. The 8-phase workflow handles DFD generation, STRIDE threat enumeration, and mitigation planning directly from your project architecture.

Do I need to provide architecture diagrams to start the threat modeling workflow?▼

You do not need to provide manual diagrams; the workflow is code-first. Launch the tool in your target project directory, and it automatically translates your existing architecture into DFDs and structured YAML threat models.

What knowledge bases are used for mapping security threats and verification?▼

The workflow queries integrated knowledge bases to map threats against CWE, CAPEC, and ATT&CK frameworks. It also references security verification standards including WSTG, MASTG, and ASVS during the mitigation planning phase.

Related Skills

Explore More Software Engineering Skills→
josemlopezjosemlopez
8

tm-report

Generate comprehensive risk reports from STRIDE-based threat modeling data.

Community
Advanced
SjdjdiejdrirhdkjejSjdjdiejdrirhdkjej

optimization-phase

Run post-implementation quality gates and generate reports before release.

Community
Advanced
SensLiaoSensLiao

security-pentest-recon-scan

Execute authorized reconnaissance and vulnerability scanning with CLI tools.

Community
Advanced
hbvg234hbvg234
1

stride-analysis-patterns

Identify and document security threats using STRIDE across system components.

Community
Advanced