skills.rest
toddbadams
toddbadamsCOMMUNITY
Explore all skills by this author →
GitHub

threat-modeling

Analyzes security threats using the STRIDE methodology for system design and risk assessment.

Updated Aug 23, 2026
Search Tags:#security#system design#threat modeling#risk assessment#stride#vulnerability analysis
One-click install
npx skills add https://github.com/toddbadams/SBFoundation --skill threat-modeling-toddbadams
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/toddbadams/SBFoundation/tree/main/.claude/skills/security/threat-modeling
Command: npx skills add https://github.com/toddbadams/SBFoundation --skill threat-modeling-toddbadams

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and analyze potential security threats within a system, aiding in the design, review, and risk assessment phases.

Core Features & Use Cases

  • STRIDE Methodology: Systematically analyzes threats across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
  • System Decomposition: Assists in breaking down systems to identify entry points, data flows, and trust boundaries.
  • Threat Rating & Mitigation: Guides the process of rating threats and determining appropriate mitigation strategies.
  • Use Case: When designing a new user authentication system, use this Skill to proactively identify potential vulnerabilities like credential stuffing or session hijacking before deployment.

Quick Start

Use the threat-modeling skill to identify threats for a new user authentication system.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is STRIDE methodology for threat modeling and risk assessment?▼

STRIDE methodology systematically categorizes security threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege to analyze system design risks.

How do I identify security vulnerabilities in a new user authentication system?▼

Decompose the authentication architecture to trace data flows across trust boundaries, then apply the STRIDE methodology to enumerate threats like credential stuffing or session hijacking before deployment.

Can I use this threat modeling skill to trace data flows across trust boundaries?▼

Yes, this skill facilitates system decomposition to trace data flows, identify trust boundaries, map attack vectors, and evaluate the effectiveness of existing security controls.

What is the best way to rate security threats and define mitigation strategies?▼

Structured analysis of attack vectors using the STRIDE methodology guides the process of rating identified threats and determining appropriate, effective security mitigation strategies.

Does threat modeling require a fully documented system design to analyze attack vectors?▼

Effective threat modeling requires sufficient system design context to break down architecture, identify entry points, and trace data flows for structured analysis of attack vectors and security control effectiveness.

Related Skills

Explore More Software Engineering Skills→
AreebaZafarChohanAreebaZafarChohan

architecture-documentation

Convert specifications into architectural designs with components, data flows, and contracts.

Community
Advanced
ArogyaReddyArogyaReddy

security-requirement-extraction

Convert threat models into structured security requirements with attributes and traceability.

Community
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
felixgeelhaarfelixgeelhaar
1

security-expert

Identify and analyze software threats using STRIDE, PASTA, and attack trees.

Community
Advanced