
Threat Modeling Expert
A solid baseline for STRIDE analysis and attack tree construction when you're reviewing architecture or designing new systems. Walks through the full cycle from scoping and data flow diagrams to threat prioritization and mitigation design. The real value is having a structured process baked in rather than ad-hoc security reviews. Best when you involve developers in the sessions and keep models updated as your architecture evolves. Won't replace compliance audits or pen testing, but it's a good forcing function to think through attack vectors before you ship.
- skills.sh installs
- 384
- GitHub stars
- 39.4K
- last updated
- Jun 3, 2026
Install
$ npx -y skills add sickn33/antigravity-awesome-skills --skill threat-modeling-expert --agent claude-codeInstalls into .claude/skills of the current project.
Files
Threat Modeling Expert
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems.
Capabilities
- STRIDE threat analysis
- Attack tree construction
- Data flow diagram analysis
- Security requirement extraction
- Risk prioritization and scoring
- Mitigation strategy design
- Security control mapping
Use this skill when
- Designing new systems or features
- Reviewing architecture for security gaps
- Preparing for security audits
- Identifying attack vectors
- Prioritizing security investments
- Creating security documentation
- Training teams on security thinking
Do not use this skill when
- You lack scope or authorization for security review
- You need legal or compliance certification
- You only need automated scanning without human review
Instructions
Sponsors
Details
- Repository
- github.com/sickn33/antigravity-awesome-skills
- First seen
- Jun 3, 2026
More from sickn33/antigravity-awesome-skills
All 708- Sql Injection Testing382
- Async Python Patterns380
- Mlops Engineer380
- Seo Content Planner380
- Debugger379
- Seo Content Auditor379
- Python Development Python Scaffold378
- React Modernization377
- Codebase Cleanup Deps Audit375
- Pdf Official374
- Tutorial Engineer374
- Angular372
- Angular State Management372
- Code Refactoring Context Restore372
- Minecraft Bukkit Pro372
- Exa Search369
- Backtesting Frameworks367
- Error Handling Patterns367
- Sql Pro367
- E2e Testing Patterns366
- Python Packaging366
- Seo Structure Architect366
- Terraform Specialist364
- Cicd Automation Workflow Automate362