threat_modeling

Generate a structured threat model with assets, trust boundaries, and STRIDE categories.

2|2|Updated Apr 3, 2026
One-click install
npx skills add https://github.com/tamnguyentommy-rgb/Routex_AI_Web_Project --skill threat-modeling-tamnguyentommy-rgb
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: threat_modeling
Source: https://github.com/tamnguyentommy-rgb/Routex_AI_Web_Project/tree/main/.local/skills/threat_modeling
Command: npx skills add https://github.com/tamnguyentommy-rgb/Routex_AI_Web_Project --skill threat-modeling-tamnguyentommy-rgb

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling provides a structured approach to identify and document security threats to a project, helping teams build safer architectures.

Core Features & Use Cases

  • Asset enumeration and trust boundary mapping.
  • STRIDE-based threat analysis across critical components.
  • Documentation of assets, boundaries, threats, and required guarantees in threat_model.md.
  • Use case: kickoff architecture review, authentication/storage changes, or third-party integrations.

Quick Start

Start a threat-modeling pass on the project by listing assets, defining trust boundaries, and enumerating STRIDE threats to generate threat_model.md.

Frequently Asked Questions about threat_modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a structured threat model for a project architecture?

Generate a structured threat model by enumerating assets, mapping trust boundaries, and analyzing STRIDE threat categories to produce a comprehensive threat_model.md document.

What is STRIDE-based threat analysis and when do I need it?

STRIDE-based threat analysis is a structured method to identify security threats across critical components, needed during project kickoff, architecture reviews, or changes to authentication, data storage, and external integrations.

How do I identify security threats when changing authentication or data storage?

Identify security threats by mapping trust boundaries and enumerating applicable STRIDE threat categories to document required security guarantees during architecture changes.

What's the best way to document security guarantees and trust boundaries?

Document security guarantees and trust boundaries by generating a structured threat model that enumerates assets, defines boundaries, and maps threats to produce a threat_model.md file.

Can I use threat modeling for third-party integration architecture reviews?

Yes, threat modeling applies to third-party integration architecture reviews by identifying assets, mapping trust boundaries across integrations, and analyzing STRIDE threats to document security guarantees.