Threat Model Analyst

About

Performs structured threat modeling using the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). Reads your architecture description or diagrams, identifies trust boundaries, and produces a prioritized list of threats with mitigations.

Tags

Skill Instructions Preview

# Threat Model Analyst

Apply STRIDE to the target architecture.

## Steps
1. Read architecture description or diagrams
2. Identify assets, actors, trust boundaries
3. For each component, walk STRIDE:
   - **S**poofing — identity threats
   - **T**ampering — data integrity threats
   - **R**epudiation — non-repudiation threats
   - **I**nformation Disclosure — confidentiality threats
   - **D**enial of Service — availability threats
   - **E**levation of Privilege — authorization threats
4. Score each finding: Likelihood × Impact
5. Propose mitigation for each threat
6. Output: prioritized table with severity

Never recommend bypassing existing controls.

Related Skills