threat-modeling

Structure threat discovery and risk prioritization using STRIDE, PASTA, and LINDDUN frameworks.

17|5|Updated Feb 6, 2026

Search Tags:#threat modeling #security architecture #risk assessment #stride #owasp top 10 #cwe #attack tree

Ready to run

npx skills add https://github.com/MonumentalSystems/Atlas-Agent-Teams --skill threat-modeling-monumentalsystems

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/MonumentalSystems/Atlas-Agent-Teams/tree/main/teams/security/skills/threat-modeling
Command: npx skills add https://github.com/MonumentalSystems/Atlas-Agent-Teams --skill threat-modeling-monumentalsystems

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling helps you systematically identify how attackers could compromise your system, then prioritize the most important risks and mitigations before vulnerabilities become incidents.

Core Features & Use Cases

Framework-driven analysis: Apply STRIDE, PASTA, and LINDDUN to cover security threats and privacy risks in a structured way.
Attack tree decomposition: Break a goal into attack vectors and step-by-step techniques to understand likely attacker paths.
Common pattern mapping: Relate findings to known weakness categories such as OWASP Top 10 and CWE, then plan defenses using established security architecture patterns.
Risk assessment scoring: Use CVSS, DREAD, and OWASP risk rating concepts to evaluate severity and prioritize remediation.
Security architecture guidance: Use defense-in-depth, zero trust, and secure-by-design principles to ensure mitigations align with system design.

Quick Start

Use threat-modeling to produce a prioritized list of threats and mitigations for a web application that needs strong authentication, authorization, and audit logging.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I use threat modeling to identify security risks in a web application architecture?▼

Threat modeling identifies how attackers could exploit a web application by structuring threat discovery using STRIDE, PASTA, and LINDDUN frameworks, mapping vulnerabilities to OWASP Top 10 and CWE categories, and prioritizing risks with CVSS and DREAD scoring.

What is the best way to prioritize security vulnerabilities found during architecture review?▼

Prioritize security vulnerabilities by applying risk assessment scoring methods like CVSS, DREAD, and OWASP risk rating concepts to evaluate severity, which helps rank the most important threats and mitigations before incidents occur.

Can I use attack tree analysis to map authentication and authorization risks?▼

Attack tree analysis breaks an attacker's goal into step-by-step attack vectors and techniques, helping you understand likely paths to exploit authentication, authorization, and privacy risks within your system architecture.

Does threat modeling support privacy risk assessments using LINDDUN?▼

Threat modeling applies LINDDUN concepts alongside STRIDE and PASTA to systematically cover both security threats and privacy risks during software and platform design reviews.

How do I align mitigations with secure-by-design and zero trust principles?▼

Align mitigations with secure-by-design principles by using defense-in-depth and zero trust security architecture guidance, ensuring that planned defenses map directly to established architectural patterns and your system design.

When do I need to perform threat modeling for API and platform designs?▼

Perform threat modeling early in the design phase for web, API, and platform designs to systematically identify how attackers could compromise the system and plan architectural mitigations before vulnerabilities become incidents.