stride-analysis-patternscommit be57c0bSKILL.md · Security Audit
STRIDE Analysis Patterns
Uses STRIDE to identify threats: spoofing, tampering, repudiation, information disclosure, denial of service and elevation of privilege.
npx skills add wshobson/agents --skill stride-analysis-patternsCommand selected. Copy it manually.
- Permissions
- read-repo
- write-files
- shell
- network
- Compatible with
- Claude Code, Codex, Cursor, Copilot, OpenCode
- GitHub
- 42.1k
- Source
- Community · Seth Hobson
- Status
- Scan passed
- License
- MIT
- Category
- Security Audit
Core rule
Cover all six STRIDE categories and never skip one.
Execution Phases
Phase 01Describe the system
Write a system overview, draw the data flow diagram, and mark the trust boundaries.
Phase 02List the assets
List assets such as credentials, personal data, sessions, logs and configuration with their sensitivity.
Phase 03Analyze each category
For each STRIDE category, list threats per component or interaction with target, impact and likelihood.
Phase 04Assess risk
Rate threats in a risk matrix and prioritize them.
Phase 05Plan mitigations
Recommend mitigations for immediate, 30-day and 90-day horizons, and keep the threat model as a living document.
Permissions (summarised from SKILL.md)
| Capability | Needed | Details |
|---|---|---|
| File writes | Required | Writes threat model documents and related analysis. |
| Command execution | Not required | This is a method with templates and needs no command execution. |
| Network outbound | Not required | The instructions include no network access. |
SKILL.md frontmatter (YAML)
---
name: stride-analysis-patterns
description: Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.
---Related skills
A rule scan cannot catch every risk. Read this skill's SKILL.md and check its permissions before installing.