The Security Threat Modeler skill empowers Claude to act as a Senior Security Architect, providing a systematic approach to uncovering vulnerabilities within software designs. By decomposing systems into Data Flow Diagrams (DFDs) and identifying trust boundaries, the skill applies the STRIDE framework—Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege—to ensure comprehensive coverage of the attack surface. It is ideal for developers and architects who need to integrate security into the design phase, offering detailed risk ranking via DREAD and specific technical controls to harden systems against modern threats.
主な機能
01Actionable mitigation plans based on industry standards like OWASP
022 GitHub stars
03DREAD methodology for granular risk scoring
04Structured Threat Model Report generation
05STRIDE-based systematic vulnerability identification
06Data Flow Diagram (DFD) and Trust Boundary analysis
