Ops

threat-modeling

by DevOps-Security-Agent-Skills

Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when designing secure systems or assessing application security.

v1.0.0New

Unsigned, install at your own risk

Unverified

This skill has no cryptographic signature attached. We can't verify the contents match what the publisher intended.

Install this skill

Run this command in your terminal. No account required — it auto-detects your AI tool and installs the skill file.

npx @skills-hub-ai/cli install devops-security-agent-skills-threat-modeling
Or download directly:
Browse all CLI commands →

Setup by platform

Claude Code

~/.claude/skills/<skill>/SKILL.md

Setup guide →

Install

One-click setup for your editor

Run in your project root

npx @skills-hub-ai/cli install devops-security-agent-skills-threat-modeling --target claude-code
0

Instructions

This skill doesn’t include stateful context yet, instructions only. Learn about stateful skills.

Security

Loading security scan...

Reviews (0)

View full changelog & diffs →

Related skills

Browse all →
backup-recoveryImplement backup and recovery strategies. Configure rsync, Restic, and cloud backups. Use when designing data protection solutions.0 installsjenkinsCreate and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds. Use when working with Jenkins servers, creating Jenkinsfiles, or setting up build automation for enterprise environments.0 installscloudflare-r2Manage Cloudflare R2 buckets, lifecycle, and signed URLs. Use for low-egress object storage and media delivery.0 installssops-encryptionEncrypt files and configs with Mozilla SOPS. Integrate with AWS KMS, GCP KMS, or PGP for key management. Use when encrypting configuration files, Kubernetes secrets, or implementing GitOps with encrypted secrets.0 installsagent-evalsBuild automated evaluation suites for AI agents using golden datasets, rubrics, and regression gates. Use when shipping agent features, validating prompt changes, or gating deployments on quality.0 installssecurity-automationAutomate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.0 installs

More from DevOps-Security-Agent-Skills

View source →
platform-engineeringBuild internal developer platforms (IDPs) with self-service infrastructure, golden paths, and developer portals using Backstage, Crossplane, and score.1 installschange-managementImplement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.0 installsaws-s3Configure S3 buckets, policies, and lifecycle rules. Implement versioning, replication, and security. Use when managing object storage on AWS.0 installsaws-rdsProvision and manage RDS databases. Configure backups, replication, and security. Use when deploying managed relational databases on AWS.0 installsdatabase-backupsImplement database backup strategies. Configure automated backups, retention, and recovery testing. Use when designing backup and recovery procedures.0 installsdisaster-recoveryImplement disaster recovery strategies and runbooks. Configure RPO/RTO targets and failover procedures. Use when planning for business continuity.0 installs

More Ops skills

Browse category →
rate-limitingAdd rate limiting to APIs — configure per-user and per-IP limits, sliding window algorithms, tiered quotas, retry-after headers, and progressive abuse detection.6 installsdebug-production-incidentStructured triage → mitigation → root-cause flow for live production incidents. Use when a running system is degraded or down (errors, latency, outages) and you need to restore service safely and then find the cause.4 installscachingImplement caching strategy — add HTTP cache headers, in-memory TTL caches, Redis caching layer, cache invalidation patterns, and cache warming for hot paths.2 installscost-optimization-finopsBuild a defensible cloud cost-reduction plan without hurting reliability or velocity. Use when cloud spend is rising, before/after a scaling event, or during a FinOps review of AWS/GCP/Azure usage.1 installsmodel-resilience-auditScans your codebase for hardcoded AI model references, identifies context-window assumption violations, assesses fallback coverage, and generates a compliance-risk report with a one-file model rotation config. Run after any model suspension event or before adopting a new frontier model.1 installspenetration-testingPerform basic penetration testing and security assessments. Use reconnaissance, vulnerability discovery, and exploitation techniques. Use when validating security controls or assessing system security.0 installs

Frequently asked questions about threat-modeling

What does the threat-modeling skill do?

Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when designing secure systems or assessing application security. It's a reusable SKILL.md instruction set that loads into your AI coding assistant on demand, no prompt engineering, no copy-pasting every session.

How do I install the threat-modeling skill?

Run `npx @skills-hub-ai/cli install devops-security-agent-skills-threat-modeling` from your terminal. The CLI writes the SKILL.md to the correct location for your AI tool (e.g. ~/.claude/skills/devops-security-agent-skills-threat-modeling/ for Claude Code or ~/.cursor/skills/ for Cursor with --target cursor) and adds it to your project's .skills.json lockfile.

Which AI tools does threat-modeling work with?

threat-modeling runs in Claude Code. It follows the open Agent Skills standard (SKILL.md), so the same skill works in every supported tool without modification.

Is the threat-modeling skill free?

Yes. Every skill on skills-hub.ai is free and open-source. There are no premium tiers, paywalls, or usage limits. You only pay for whatever AI assistant you're already using.

How do I use threat-modeling after installing it?

In Claude Code, type `/devops-security-agent-skills-threat-modeling` (or whatever slash command the skill registers) and the AI follows the skill's instructions immediately. You can also reference it by name in natural language, your AI loads the skill into context when relevant.

Can I share the threat-modeling skill with my team?

Yes. Commit your project's .skills.json lockfile and teammates run `npx @skills-hub-ai/cli install` (no args) to install every skill at the exact version you pinned. Organization-scoped installs work via skills-hub.ai organizations.