Threat Modeling Analyst

关于

The Threat Modeling skill transforms Claude into a security-first consultant capable of identifying and mitigating risks early in the software development lifecycle. By applying structured frameworks like STRIDE and attack tree analysis, it helps developers and architects uncover vulnerabilities in system designs, feature updates, and API endpoints. This skill ensures that security is integrated into the design phase rather than being an afterthought, providing actionable mitigation strategies, risk ratings, and comprehensive security documentation for compliance and audit readiness.

主要功能

• Security-focused documentation generation for audit compliance
• Detailed risk assessment and prioritization based on impact
• Trust boundary mapping and entry point analysis
• Actionable mitigation planning for identified security gaps
• Structured STRIDE analysis for comprehensive threat identification
• 1 GitHub stars

使用场景

• Performing risk assessments for major architectural or feature changes
• Conducting security reviews during the initial system design phase
• Identifying vulnerabilities in authentication and session management workflows