skills.rest
vibbs
vibbsCOMMUNITY
Explore all skills by this author →
GitHub

threat-modeling

Conduct data flow threat analysis and generate structured mitigations using STRIDE.

6|1|Updated Feb 25, 2026
Search Tags:#security#vulnerability#threat modeling#STRIDE#risk assessment#mitigation
One-click install
npx skills add https://github.com/vibbs/company-os --skill threat-modeling-vibbs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-modeling
Source: https://github.com/vibbs/company-os/tree/main/.claude/skills/threat-modeling
Command: npx skills add https://github.com/vibbs/company-os --skill threat-modeling-vibbs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill systematically identifies potential security threats within a system or feature, ensuring that vulnerabilities are addressed proactively.

Core Features & Use Cases

  • STRIDE Analysis: Applies the STRIDE methodology to enumerate threats.
  • Risk Assessment: Rates threats by likelihood and impact to prioritize mitigations.
  • Mitigation Planning: Defines concrete steps to address identified risks.
  • Use Case: Before launching a new feature that handles user PII, use this Skill to perform a threat model and ensure all critical security risks are identified and mitigated.

Quick Start

Perform a threat model for the new user authentication system.

Frequently Asked Questions about threat-modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a STRIDE analysis for a new software feature?▼

STRIDE analysis for a new software feature is performed by mapping data flows, identifying attack surfaces, and enumerating threats using the STRIDE methodology. The threat modeling process then rates risks by likelihood and impact to prioritize concrete mitigations.

What is threat modeling and when should I use it?▼

Threat modeling is a structured process to identify and mitigate security vulnerabilities proactively. You should use it before launching new features, modifying system architecture, or conducting compliance reviews to ensure critical security risks are addressed.

Can I use automated threat modeling for compliance reviews?▼

Yes, automated threat modeling supports compliance reviews by generating a structured threat model document. It identifies attack surfaces, enumerates STRIDE threats, rates risk, and maps threats to concrete mitigations, outputting the validated results to artifacts.

What's the best way to identify attack surfaces and rate security risks?▼

The best way to identify attack surfaces and rate security risks is through data flow threat analysis. This approach systematically enumerates vulnerabilities using STRIDE, assesses risk by likelihood and impact, and generates structured mitigations.

How do I document mitigations for security vulnerabilities?▼

To document mitigations for security vulnerabilities, conduct a data flow analysis and enumerate threats using STRIDE. The process maps identified risks to concrete mitigation steps and outputs a validated threat model document to the risk artifacts directory.

Related Skills

Explore More Software Engineering Skills→
johngutierrez31johngutierrez31

threat-modeling-expert

Apply STRIDE threat analysis to system architecture diagrams.

Community
Advanced
daeha76daeha76
2

security-pipeline

Verify code changes against CWE Top 25 and STRIDE threat models.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced
NickCrewNickCrew
29

threat-modeling-techniques

Identify and analyze security threats using STRIDE, attack trees, and risk assessment.

Community
Advanced