threat-modeling

Analyzes security threats using the STRIDE methodology for system design and risk assessment.

Updated Aug 23, 2026

Search Tags:#security #system design #threat modeling #risk assessment #stride #vulnerability analysis

Ready to run

npx skills add https://github.com/toddbadams/SBFoundation --skill threat-modeling-toddbadams

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/toddbadams/SBFoundation/tree/main/.claude/skills/security/threat-modeling
Command: npx skills add https://github.com/toddbadams/SBFoundation --skill threat-modeling-toddbadams

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and analyze potential security threats within a system, aiding in the design, review, and risk assessment phases.

Core Features & Use Cases

STRIDE Methodology: Systematically analyzes threats across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
System Decomposition: Assists in breaking down systems to identify entry points, data flows, and trust boundaries.
Threat Rating & Mitigation: Guides the process of rating threats and determining appropriate mitigation strategies.
Use Case: When designing a new user authentication system, use this Skill to proactively identify potential vulnerabilities like credential stuffing or session hijacking before deployment.

Quick Start

Use the threat-modeling skill to identify threats for a new user authentication system.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is STRIDE methodology for threat modeling and risk assessment?▼

STRIDE methodology systematically categorizes security threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege to analyze system design risks.

How do I identify security vulnerabilities in a new user authentication system?▼

Decompose the authentication architecture to trace data flows across trust boundaries, then apply the STRIDE methodology to enumerate threats like credential stuffing or session hijacking before deployment.

Can I use this threat modeling skill to trace data flows across trust boundaries?▼

Yes, this skill facilitates system decomposition to trace data flows, identify trust boundaries, map attack vectors, and evaluate the effectiveness of existing security controls.

What is the best way to rate security threats and define mitigation strategies?▼

Structured analysis of attack vectors using the STRIDE methodology guides the process of rating identified threats and determining appropriate, effective security mitigation strategies.

Does threat modeling require a fully documented system design to analyze attack vectors?▼

Effective threat modeling requires sufficient system design context to break down architecture, identify entry points, and trace data flows for structured analysis of attack vectors and security control effectiveness.