How does this skill help with security audits?

It provides structured templates and automated checklists to ensure common threat vectors are systematically reviewed during the analysis of system architecture or code.

What is the STRIDE methodology?

STRIDE is a security framework used to identify threats across six categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.

Does this skill suggest specific security mitigations?

Yes, it includes a database of common mitigations for each STRIDE category, such as MFA for spoofing or parameterized queries for tampering.

Can I use this for compliance documentation?

Yes, the skill generates detailed Markdown reports and risk matrices that are suitable for compliance preparation, audits, and internal security reviews.

STRIDE Threat Modeling Patterns

Name: STRIDE Threat Modeling Patterns
Author: EngineerWithAI

byEngineerWithAI

セキュリティとテスト

Systematically identifies and mitigates security threats using the industry-standard STRIDE methodology during system architecture and code reviews.

概要

The STRIDE Analysis Patterns skill empowers developers and security engineers to conduct comprehensive threat modeling sessions directly within Claude Code. By applying the STRIDE framework—Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege—this skill provides structured templates and automated questionnaires to identify vulnerabilities early in the software development lifecycle. It facilitates the creation of detailed risk assessment matrices, trust boundary definitions, and actionable mitigation strategies, ensuring security is integrated into the design phase of any project.

主な機能

Standardized Markdown templates for professional threat model documentation
Detailed mapping of trust boundaries and asset sensitivity
Risk assessment matrix for prioritizing vulnerabilities by impact and likelihood
Comprehensive STRIDE categorization for systematic threat identification
Python-based analysis logic for automated security questionnaires
0 GitHub stars

ユースケース

Designing security architecture for new cloud-native applications
Training development teams on proactive threat identification techniques
Conducting security audits and compliance reviews for existing systems

概要

主な機能

Standardized Markdown templates for professional threat model documentation
Detailed mapping of trust boundaries and asset sensitivity
Risk assessment matrix for prioritizing vulnerabilities by impact and likelihood
Comprehensive STRIDE categorization for systematic threat identification
Python-based analysis logic for automated security questionnaires
0 GitHub stars

ユースケース

Designing security architecture for new cloud-native applications
Training development teams on proactive threat identification techniques
Conducting security audits and compliance reviews for existing systems