Stride Analysis Patterns

A solid STRIDE threat modeling implementation that walks you through systematic security analysis with ready-to-use templates and Python classes. You get a complete threat model document template with risk matrices, asset classification, and mitigation tracking, plus code for programmatically managing threats and generating reports. Best when you need to formalize your security review process or satisfy compliance requirements that demand documented threat analysis. The templates are thorough without being overwhelming, and the risk scoring actually helps prioritize what to fix first instead of drowning you in theoretical vulnerabilities.

skills.sh installs: 22.2K
GitHub stars: 42.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add wshobson/agents --skill stride-analysis-patterns --agent claude-code

Installs into .claude/skills of the current project.

Files

STRIDE Analysis Patterns

Systematic threat identification using the STRIDE methodology.

When to Use This Skill

Starting new threat modeling sessions
Analyzing existing system architecture
Reviewing security design decisions
Creating threat documentation
Training teams on threat identification
Compliance and audit preparation

Core Concepts

1. STRIDE Categories

S - Spoofing       → Authentication threats
T - Tampering      → Integrity threats
R - Repudiation    → Non-repudiation threats
I - Information    → Confidentiality threats
    Disclosure
D - Denial of      → Availability threats
    Service
E - Elevation of   → Authorization threats
    Privilege