threat-modeling
Structured security analysis using OWASP Four-Question Framework and STRIDE methodology. Generates threat matrices with risk ratings, mitigations, and prioritization. Use for attack surface analysis, security architecture review, or when asking what can go wrong. Do NOT use for per-change diff or snippet risk review; use security-review instead.
- License
- MIT
Pinned to revision acff1d0a1f21, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/threat-modeling/SKILL.md
- skills/threat-modeling/references/advanced-analysis.md
- skills/threat-modeling/references/risk-rating-guide.md
- skills/threat-modeling/references/security-defense-in-depth.md
- skills/threat-modeling/references/security-least-privilege.md
- skills/threat-modeling/references/security-owasp-top-10.md
- skills/threat-modeling/references/security-zero-trust.md
- skills/threat-modeling/references/stride-methodology.md
- skills/threat-modeling/scripts/generate_mitigation_roadmap.py
- skills/threat-modeling/scripts/generate_threat_matrix.py
- skills/threat-modeling/scripts/validate_threat_model.py
- skills/threat-modeling/templates/threat-model-template.md
Every link opens the file at its source, pinned to the revision this page describes.