# threat-modeling-expert

A skill that walks a system through threat modeling: STRIDE per component, attack trees, risk scoring and security requirements.

- skill · `type=skill` · Claude Code · 73 installs
- Author: davila7
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/threat-modeling-expert
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/threat-modeling-expert

## What it does

The skill runs a fixed sequence. It starts with scope and trust boundaries, then data flow diagrams, assets and entry points. Each component gets STRIDE applied to it, critical paths get attack trees, and the findings are scored and ranked. Mitigations and residual risks come last.

Seven areas are covered: STRIDE analysis, attack tree construction, data flow diagram review, security requirement extraction, risk prioritization, mitigation design and mapping threats to controls. Use it when designing a new system, reviewing architecture before an audit, or when a team needs to see where its security requirements actually come from.

The author is explicit about the limits. Without scope or authorization for a security review, the skill is the wrong tool. It does not produce legal or compliance certification, and it is not a replacement for automated scanning when no human review is wanted. Two practical cautions: threat models should not hold sensitive details without access controls, and they need updating whenever the architecture changes.

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --skill security/threat-modeling-expert
```

2. **Skills CLI (Vercel)**
```bash
npx skills add davila7/claude-code-templates --skill threat-modeling-expert -a claude-code
```

3. **Manually: put the files in place**
- File: `~/.claude/skills/threat-modeling-expert/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/threat-modeling-expert/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/threat-modeling-expert/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/threat-modeling-expert/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install davila7/claude-code-templates threat-modeling-expert
```

2. **Manually: put the files in place**
- File: `.github/skills/threat-modeling-expert/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/security/threat-modeling-expert
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/threat-modeling-expert/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/threat-modeling-expert

## When to use it
- map threats in a new system before writing code
- find security gaps in an architecture ahead of an audit
- build an attack tree for a critical path
- derive security requirements from a system description
- rank the risks that came out of a review

## Example prompts
- Run STRIDE over this payment service architecture and mark the trust boundaries
- Build an attack tree for the OAuth login flow
- Pull security requirements out of this data flow diagram

## Similar
- [stride-threat-modeling](https://affpapa.org/en/nevibecode/skills/stride-threat-modeling.md) — skill · 2700 installs
- [threat-modeling-with-aws-security-agent](https://affpapa.org/en/nevibecode/skills/threat-modeling-with-aws-security-agent.md) — skill · 1600 installs
- [threat-modeling](https://affpapa.org/en/nevibecode/skills/threat-modeling.md) — skill · 460 installs
- [threat-modeling-techniques](https://affpapa.org/en/nevibecode/skills/threat-modeling-techniques.md) — skill · 356 installs
- [threat-model-analyst](https://affpapa.org/en/nevibecode/skills/threat-model-analyst.md) — skill · 1500 installs
- [tm7-threat-model](https://affpapa.org/en/nevibecode/skills/tm7-threat-model.md) — skill · 29 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 495 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md