threat-modeling

Included with Lifetime

$97 forever

Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests

universalsecuritythreat-modelingstridearchitecturerisk

What this skill does


# Threat Modeling (STRIDE)

## Outputs (Definition of Done)

Produce a data flow diagram, a threat register, and a mitigation plan that becomes tickets and tests.

## Load Next (References)

- `references/stride-workshop.md` — step-by-step workshop agenda + DFD guidance
- `references/common-threats-and-mitigations.md` — threat catalog with mitigations
- `references/templates.md` — copy/paste templates for docs and tickets

Files: 5

Size: 7.0 KB

Complexity: 28/100

Category: universal

Source: https://github.com/bobmatnyc/claude-mpm-skills/tree/main/universal/security/threat-modeling

Related in universal

headlessui

Included

Headless UI - Unstyled, fully accessible UI components for React and Vue with built-in ARIA patterns

universal

mpm-orchestration-demo

Included

Reference implementation demonstrating the Command → Agent → Skill orchestration pattern in Claude MPM, showing both preloaded-skill and dynamic-skill-invocation styles

universal

kubernetes

Included

Kubernetes operations playbook for deploying services: core objects, probes, resource sizing, safe rollouts, and fast kubectl debugging

universal

opentelemetry

Included

OpenTelemetry observability patterns: traces, metrics, logs, context propagation, OTLP export, Collector pipelines, and troubleshooting

universal

terraform

Included

Terraform infrastructure-as-code workflow patterns: state and environments, module design, safe plan/apply, drift control, and CI guardrails

universal

sec-edgar-pipeline

Included

SEC EDGAR extraction pipeline: setup, filing discovery by CIK, recipe-driven extraction, and report generation.

universal

headlessui

Included

Headless UI - Unstyled, fully accessible UI components for React and Vue with built-in ARIA patterns

universal

mpm-orchestration-demo

Included

Reference implementation demonstrating the Command → Agent → Skill orchestration pattern in Claude MPM, showing both preloaded-skill and dynamic-skill-invocation styles

universal

kubernetes

Included

Kubernetes operations playbook for deploying services: core objects, probes, resource sizing, safe rollouts, and fast kubectl debugging

universal

opentelemetry

Included

OpenTelemetry observability patterns: traces, metrics, logs, context propagation, OTLP export, Collector pipelines, and troubleshooting

universal

terraform

Included

Terraform infrastructure-as-code workflow patterns: state and environments, module design, safe plan/apply, drift control, and CI guardrails

universal

sec-edgar-pipeline

Included

SEC EDGAR extraction pipeline: setup, filing discovery by CIK, recipe-driven extraction, and report generation.

universal