security-threat-modeling

Plugin security-threat-modeling from marketplace claude-skills in sethdford/claude-skills. Commands read from the repo's manifest — 1 month ago.

Skills (9)

• abuse-case-design

  Design abuse cases (negative use cases) showing how attackers misuse system features. Use when identifying attacks that exploit intended functionality or business logic flaws.

• asset-inventory

  Create a comprehensive inventory of assets (data, systems, infrastructure, people) and their criticality, value, and dependencies. Use when prioritizing threats and allocating security resources.

• attack-tree-modeling

  Build hierarchical attack trees showing how attackers decompose goals into sub-goals and exploits. Use when analyzing attack paths, prioritizing security investments, or assessing attacker effort and cost.

• data-flow-diagram-security

  Create and analyze DFDs (Data Flow Diagrams) with security focus, identifying data flows across trust boundaries, storage, and processing points. Use when modeling system architecture for threat analysis.

• risk-scoring

  Quantify risk using likelihood and impact, apply severity ratings, and prioritize mitigations. Use when prioritizing threats, allocating security budget, and communicating risk to leadership.

• stride-analysis

  Systematically identify and document threats using the STRIDE framework (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). Use when designing systems, reviewing architectures, conducting security design reviews, or updating threat models.

• threat-identification

  Systematically identify threats from threat libraries, historical CVEs, and attacker tactics. Use when augmenting STRIDE analysis with known threats from MITRE ATT&CK, CWE, or your industry.

• threat-library

  Build and maintain a reusable threat library tailored to your organization, platform, and threat landscape. Use when cataloging threats for future analyses, threat modeling sessions, and architecture reviews.

• trust-boundary-analysis

  Identify trust boundaries in system architecture where privilege levels, authority, or security contexts change. Use when designing authentication, authorization, and inter-component communication.

Slash commands (4)

• /security-threat-modeling:analyze-attack-surface

  Analyze the attack surface to identify exposed components, entry points, and potential attack vectors.

• /security-threat-modeling:assess-risk

  Quantify organizational risk from identified threats using likelihood, impact, and risk scoring methodologies.

• /security-threat-modeling:map-trust-boundaries

  Identify and document trust boundaries in the architecture, showing where privilege levels, security contexts, or threat models change.

• /security-threat-modeling:model-threats

  Conduct comprehensive threat modeling using STRIDE, attack trees, and risk scoring on a system design or architecture.

Similar plugins