| type | skill |
| lifecycle | stable |
| inheritance | inheritable |
| name | security-threat-modeler |
| description | Analyze codebase architecture to generate a STRIDE-based threat model with data flow diagrams, trust boundaries, prioritized threats, and mitigations. Compatible with Microsoft Threat Modeling Tool concepts. Use when asked to "threat model", "security analysis", "STRIDE analysis", "identify security threats", "data flow security", "generate a threat model", or "security architecture review". |
| applyTo | **/*threat*,**/*security*,**/*stride* |
| tier | standard |
| currency | 2026-04-22T00:00:00.000Z |
Security Threat Modeler
Produce a structured threat model using the STRIDE methodology, compatible with Microsoft Threat Modeling Tool concepts.
When to Use
- Before deploying a new service or feature to production
- During security design reviews or SDL milestones
- When adding authentication, authorization, data storage, or external integrations
STRIDE Reference
| Category | Threat | Property Violated |
|---|
| Spoofing | Impersonating another identity | Authentication |
| Tampering | Unauthorized modification of data | Integrity |
| Repudiation | Denying actions with no proof | Non-repudiation |
| Information Disclosure | Exposing data to unauthorized parties | Confidentiality |
| Denial of Service | Making a resource unavailable | Availability |
| Elevation of Privilege | Gaining unauthorized privileged access | Authorization |
DFD Elements
| Element | Description |
|---|
| Process | Code that transforms data (services, APIs, workers) |
| External Interactor | Entities outside your control (users, third-party APIs) |
| Data Store | Persistent storage (databases, files, caches, queues) |
| Data Flow | Data movement between elements (label with protocol) |
| Trust Boundary | Separation between zones of different trust |
Process
Step 1: Scope
Identify: the system under analysis, the deployment model (cloud/on-prem/hybrid), stakeholders, and security requirements (compliance, data classification).
Step 2: Discover Architecture from Code
Scan the codebase to identify all DFD elements:
