skills.rest
jamestorrevillas
jamestorrevillasCOMMUNITY
Explore all skills by this author →
GitHub

threat-modeling

Apply STRIDE threat modeling to identify and mitigate security threats in software systems.

3|4|Updated Mar 20, 2026
Search Tags:#risk-assessment#threat-modeling#stride#security-review#attack-surface#security-design
One-click install
npx skills add https://github.com/jamestorrevillas/dev-skills --skill threat-modeling-jamestorrevillas
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/jamestorrevillas/dev-skills/tree/main/.github/skills/threat-modeling
Command: npx skills add https://github.com/jamestorrevillas/dev-skills --skill threat-modeling-jamestorrevillas

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling helps identify security threats early in the design process, enabling teams to design defenses before implementation and reduce risk.

Core Features & Use Cases

  • STRIDE-based threat enumeration for each component and data flow
  • Threat prioritization, risk assessment, and mitigation mapping aligned with security design principles
  • Guidance for threat modeling workshops, architecture reviews, and security assessments

Quick Start

Identify assets, enumerate STRIDE threats for the new feature, and map mitigations.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is STRIDE threat modeling and how does it secure software architecture?▼

STRIDE threat modeling is a structured technique to identify and mitigate security threats in software systems by enumerating risks like spoofing and tampering across components and data flows during architecture reviews.

How do I identify security threats and mitigate risks during system design?▼

Identify system assets, enumerate STRIDE threats for each component and data flow, assess risk levels, and map mitigations aligned with security design principles to proactively secure your architecture before implementation.

Can I apply threat modeling to microservice and cloud architectures?▼

Yes, threat modeling is applicable across cloud, on-premises, and microservice architectures, allowing you to assess attack surfaces and map security mitigations specific to your distributed system components.

What is the best way to conduct a security review for a new software feature?▼

The best way to conduct a security review is running a threat modeling workshop: identify assets, enumerate STRIDE threats for the new feature, assess risks, and map mitigations to reduce vulnerabilities early.

When should I perform threat modeling in the software development lifecycle?▼

Perform threat modeling early in the system design process to identify security threats before implementation, and conduct it during architecture reviews and security assessments to continuously reduce risk.

Related Skills

Explore More Software Engineering Skills→
woohyun212woohyun212
21

threat-model

Generates STRIDE-classified threat catalog and prioritized mitigation roadmap from system architecture artifacts.

Community
Advanced
itou-daikiitou-daiki

planner

Create implementation plans with file paths, dependencies, risks, and rollout order.

Community
Advanced
xijunwwxijunww
1

recon

Automate penetration testing reconnaissance to discover assets and attack surfaces.

Community
Advanced
jassicsjassics
6

pasta

Execute the seven-stage PASTA threat modeling process aligned to business risk.

Community
Advanced