Domains
Forms
Mechanism
Breaks down how the skill works and what it produces, so you can quickly judge whether it fits your scenario and value.
When starting threat modeling sessions, analyzing system architecture, reviewing security design, creating threat docs, or preparing compliance audits.
references/details.md for concrete templates and worked examplesA systematic threat identification report with categorized threats, visual aids (DFDs), and a living document that feeds into mitigation and compliance workflows.
Use Cases
A fintech team is designing a new payment API and needs to identify security risks before implementation. They invoke this skill to run a STRIDE session: mapping each component to the six categories, using the matrix to ask targeted questions, and producing a threat model document. This helps them catch authentication and authorization gaps early, reducing breach risk and easing PCI compliance.
During a yearly security audit, an enterprise reviews its microservice architecture. Using this skill, the audit team systematically covers all STRIDE categories per service, references templates for consistency, and updates the living threat document. The output highlights repudiation and DoS exposures, guiding remediation priorities and demonstrating due diligence to regulators.
Skill Relationships
Dependency relationships read as "the upper tier points to the lower tier." The current Skill sits in the middle tier — above are Skills that depend on it, below are Skills it depends on.
Tier 1 · These Skills Use Me
Tier 2 · Current Skill
Tier 3 · I Use These Skills
Browse this skill's relationships within its skillset. Click a node to switch the side panel; use the search box to jump to any skill.
Skill File