"Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests"
Resources
2Install
npx skillscat add bobmatnyc/claude-mpm-skills/threat-modeling Install via the SkillsCat registry.
About this skill
This skill guides a structured threat modeling process that creates data flow diagrams, performs STRIDE analysis, assigns risk scores, and converts mitigations into backlog items and tests. It solves the problem of systematically identifying and addressing security risks in software designs. It is appropriate when designing new features, reviewing architecture changes, or handling sensitive data flows.
SKILL.md
Threat Modeling (STRIDE)
Outputs (Definition of Done)
Produce a data flow diagram, a threat register, and a mitigation plan that becomes tickets and tests.
Load Next (References)
references/stride-workshop.md— step-by-step workshop agenda + DFD guidancereferences/common-threats-and-mitigations.md— threat catalog with mitigationsreferences/templates.md— copy/paste templates for docs and tickets