The STRIDE Analysis Patterns skill empowers developers and security engineers to conduct structured threat modeling directly within their development workflow. By categorizing potential vulnerabilities into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege, this skill provides the templates and logic necessary to document trust boundaries, assess risks, and implement targeted mitigations. Whether you are designing a new system architecture or reviewing existing code, this skill ensures that security is integrated into the design phase, significantly reducing the likelihood of critical vulnerabilities reaching production.
主な機能
01Targeted mitigation recommendations for all six STRIDE categories
02Comprehensive STRIDE methodology implementation for systematic analysis
030 GitHub stars
04Standardized threat modeling document templates and data flow diagrams
05Quantitative risk assessment matrix and threat prioritization logic
06Automated security questionnaire generation for system components
