One-click install
npx skills add https://github.com/Pact-Community-Organization/github-marketplace --skill threat-modeling-pact-community-organization
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/Pact-Community-Organization/github-marketplace/tree/main/skills/threat-modeling
Command: npx skills add https://github.com/Pact-Community-Organization/github-marketplace --skill threat-modeling-pact-community-organization

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling helps identify and prioritize security risks in Pact 5 smart contracts using STRIDE, enabling proactive mitigation.

Core Features & Use Cases

  • STRIDE-based threat identification across Pact 5 modules
  • Attack trees, threat IDs, and risk assessment to guide mitigations
  • Practical guidance for governance and contract upgrades

Quick Start

Analyze a Pact 5 contract to identify STRIDE threats and plan mitigations.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security risks in Pact 5 smart contracts?

STRIDE threat modeling identifies security risks in Pact 5 smart contracts by analyzing attack vectors, assessing risks, and generating structured mitigation plans for contract modules and governance processes.

What is STRIDE threat modeling for smart contracts?

STRIDE threat modeling systematically identifies security threats like spoofing and repudiation in smart contracts. It uses attack trees and threat IDs to assess and reduce risk across Pact 5 modules.

How do I create an attack tree for smart contract vulnerabilities?

Create an attack tree for smart contract vulnerabilities by mapping STRIDE threats to specific contract assets. This structures attack vectors and residual risk templates to guide mitigation planning.

Can I use threat modeling for smart contract governance and upgrades?

Yes, threat modeling applies to smart contract governance and upgrades by identifying STRIDE-based threats and providing practical guidance to mitigate risks during contract module modifications.

Does threat modeling require prior security analysis experience?

Threat modeling provides structured templates for assets, threats, attack trees, and residual risk, guiding users through STRIDE identification and mitigation planning without requiring extensive prior security analysis experience.