threat-modeling
"Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests"
Recursos
2Instal·la
npx skillscat add bobmatnyc/claude-mpm-skills/threat-modeling Instal·la des del registre de SkillsCat.
Sobre aquest skill
This skill guides a structured threat modeling process that creates data flow diagrams, performs STRIDE analysis, assigns risk scores, and converts mitigations into backlog items and tests. It solves the problem of systematically identifying and addressing security risks in software designs. It is appropriate when designing new features, reviewing architecture changes, or handling sensitive data flows.
SKILL.md
Threat Modeling (STRIDE)
Outputs (Definition of Done)
Produce a data flow diagram, a threat register, and a mitigation plan that becomes tickets and tests.
Load Next (References)
references/stride-workshop.md— step-by-step workshop agenda + DFD guidancereferences/common-threats-and-mitigations.md— threat catalog with mitigationsreferences/templates.md— copy/paste templates for docs and tickets
Categories
Instal·la
npx skillscat add bobmatnyc/claude-mpm-skills/threat-modeling Instal·la des del registre de SkillsCat.