skills.rest
MonumentalSystems
MonumentalSystemsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

threat-modeling

Structure threat discovery and risk prioritization using STRIDE, PASTA, and LINDDUN frameworks.

17|5|Updated Feb 6, 2026
Search Tags:#threat modeling#security architecture#risk assessment#stride#owasp top 10#cwe#attack tree
One-click install
npx skills add https://github.com/MonumentalSystems/Atlas-Agent-Teams --skill threat-modeling-monumentalsystems
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/MonumentalSystems/Atlas-Agent-Teams/tree/main/teams/security/skills/threat-modeling
Command: npx skills add https://github.com/MonumentalSystems/Atlas-Agent-Teams --skill threat-modeling-monumentalsystems

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling helps you systematically identify how attackers could compromise your system, then prioritize the most important risks and mitigations before vulnerabilities become incidents.

Core Features & Use Cases

  • Framework-driven analysis: Apply STRIDE, PASTA, and LINDDUN to cover security threats and privacy risks in a structured way.
  • Attack tree decomposition: Break a goal into attack vectors and step-by-step techniques to understand likely attacker paths.
  • Common pattern mapping: Relate findings to known weakness categories such as OWASP Top 10 and CWE, then plan defenses using established security architecture patterns.
  • Risk assessment scoring: Use CVSS, DREAD, and OWASP risk rating concepts to evaluate severity and prioritize remediation.
  • Security architecture guidance: Use defense-in-depth, zero trust, and secure-by-design principles to ensure mitigations align with system design.

Quick Start

Use threat-modeling to produce a prioritized list of threats and mitigations for a web application that needs strong authentication, authorization, and audit logging.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I use threat modeling to identify security risks in a web application architecture?▼

Threat modeling identifies how attackers could exploit a web application by structuring threat discovery using STRIDE, PASTA, and LINDDUN frameworks, mapping vulnerabilities to OWASP Top 10 and CWE categories, and prioritizing risks with CVSS and DREAD scoring.

What is the best way to prioritize security vulnerabilities found during architecture review?▼

Prioritize security vulnerabilities by applying risk assessment scoring methods like CVSS, DREAD, and OWASP risk rating concepts to evaluate severity, which helps rank the most important threats and mitigations before incidents occur.

Can I use attack tree analysis to map authentication and authorization risks?▼

Attack tree analysis breaks an attacker's goal into step-by-step attack vectors and techniques, helping you understand likely paths to exploit authentication, authorization, and privacy risks within your system architecture.

Does threat modeling support privacy risk assessments using LINDDUN?▼

Threat modeling applies LINDDUN concepts alongside STRIDE and PASTA to systematically cover both security threats and privacy risks during software and platform design reviews.

How do I align mitigations with secure-by-design and zero trust principles?▼

Align mitigations with secure-by-design principles by using defense-in-depth and zero trust security architecture guidance, ensuring that planned defenses map directly to established architectural patterns and your system design.

When do I need to perform threat modeling for API and platform designs?▼

Perform threat modeling early in the design phase for web, API, and platform designs to systematically identify how attackers could compromise the system and plan architectural mitigations before vulnerabilities become incidents.

Related Skills

Explore More Legal & Compliance Skills→
ref-docsref-docs

system-architect

Generate system architecture designs with C4 diagrams and ADRs.

Official
Advanced
TheSethRoseTheSethRose

threat-mitigation-mapping

Map identified threats to security controls with risk scoring and mitigation plans.

Community
Advanced
AndyAnh174AndyAnh174

WordPress Penetration Testing

Scan WordPress installations for vulnerabilities and enumerate users, themes, and plugins.

Community
Advanced
AI-Foundry-CoreAI-Foundry-Core
4

attack-tree-construction

Maps attack paths into AND/OR trees with leaf-node attributes and exports diagrams and structured data.

Official
Advanced