threat-modeling - Generate Risk-Scored Threat Models
Identifies threats, abuse cases, and attack patterns using STRIDE, PASTA, DFD, and CVSS-based risk analysis.
Tags
Updated: 2026-10-15Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Apply STRIDE analysis
- Score threats with CVSS
- Perform PASTA analysis
- Map threats to DFD elements
- Generate abuse cases
- Track workflow with TodoWrite
Inputs
- Phase 1 business context artifacts
- Phase 3 codebase mapping artifacts
- Phase 4 security control artifacts
- scoring-cvss-threats skill
Outputs
- Threat model
- Abuse cases
- CVSS scores
- Risk-prioritized threats
Requirements
- Completed Phase 1 artifacts
- Completed Phase 3 artifacts
- Completed Phase 4 artifacts
- scoring-cvss-threats skill
- Read, Write, Bash, and TodoWrite tools
