bobmatnyc

threat-modeling

"Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests"

bobmatnyc 73 20 Updated 8mo ago

Resources

2
GitHub

Install

npx skillscat add bobmatnyc/claude-mpm-skills/threat-modeling

Install via the SkillsCat registry.

About this skill

This skill guides a structured threat modeling process that creates data flow diagrams, performs STRIDE analysis, assigns risk scores, and converts mitigations into backlog items and tests. It solves the problem of systematically identifying and addressing security risks in software designs. It is appropriate when designing new features, reviewing architecture changes, or handling sensitive data flows.

SKILL.md

Threat Modeling (STRIDE)

Outputs (Definition of Done)

Produce a data flow diagram, a threat register, and a mitigation plan that becomes tickets and tests.

Load Next (References)

  • references/stride-workshop.md — step-by-step workshop agenda + DFD guidance
  • references/common-threats-and-mitigations.md — threat catalog with mitigations
  • references/templates.md — copy/paste templates for docs and tickets