threat-modelling

name	threat-modelling
description	Analyse repositories and deployed cloud infrastructure to produce STRIDE-based threat model documents with Mermaid architecture diagrams, prioritised threats, and recommendations. Use when a user asks to create a threat model, identify threats, assess attack surfaces, review an existing threat model, or update a threat model after system changes.
license	MIT
allowed-tools	Bash

Threat Modelling

Overview

This skill produces threat model documents by analysing codebases, infrastructure-as-code, and live cloud resources. It follows the STRIDE framework and the Microsoft Threat Modeling Fundamentals four-phase approach: Design, Break, Fix (recommendations only), and Verify.

This skill produces threat models. It does NOT implement fixes or perform penetration testing.

Capabilities

Capability	Action	Description
Analyse Repository	actions/analyse-repository.md	Scan codebase and IaC to map architecture and confirm a data flow diagram
Assess Infrastructure	actions/assess-infrastructure.md