threat-modeling

85 / 100 · Low risk

Fine to try.

By alicewe1/alice_skill (GitHub) · security · 63 stars · scanned at commit 19a54ac

Systematic threat modeling skill for applications, APIs, and systems using STRIDE, PASTA, Attack Trees, DREAD, LINDDUN, and OCTAVE. Use when assessing security architecture, creating data flow diagrams (Mermaid), enumerating threats from OpenAPI specs or architecture docs, building attack trees, mapping threats to NIST/CIS/OWASP ASVS controls, or producing a threat model report. Triggers on requests to threat model, analyze attack surface, create a DFD, apply STRIDE, or design security mitigati…

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 4 places.

_modules/threat-modeling/SKILL.md, line 188| OWASP Threat Dragon | DFD + STRIDE auto-suggestion | `npm install -g owasp-threat-dragon` |
_modules/threat-modeling/SKILL.md, line 192| Mermaid CLI (`mmdc`) | Render Mermaid to SVG/PNG | `npm install -g @mermaid-js/mermaid-cli` |
_modules/threat-modeling/SKILL.md, line 193| Graphviz | Attack trees, DOT rendering | `apt install graphviz` / `brew install graphviz` |

Show 1 more

_modules/threat-modeling/SKILL.md, line 194| PlantUML | Complex diagrams | `apt install plantuml` |

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'threat-modeling' ] || [ -L ~/.agents/skills/'threat-modeling' ]; then echo 'A skill folder named threat-modeling already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/alicewe1/alice_skill' "$d" && git -C "$d" checkout --quiet '19a54ac988e9929160334271f5c1924ddd9b227e' -- '_modules/threat-modeling' && mkdir -p ~/.agents/skills && cp -R "$d"/'_modules/threat-modeling' ~/.agents/skills/'threat-modeling' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'threat-modeling' ~/.claude/skills/'threat-modeling' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for alicewe1/alice_skill shows the score of its lowest-scoring skill.

SkillTrust badge for alicewe1/alice_skill

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/alicewe1/alice_skill.svg)](https://zalavijaysinh.github.io/skilltrust/repos/alicewe1/alice_skill/)

Score history

Date	Version	Score
2026-11-07	`19a54ac`	85