Threat Model Generation

Generate a comprehensive security threat model for a repository using the STRIDE methodology. This skill analyzes the codebase architecture and produces an LLM-optimized threat model document that other security skills can reference.

Adapted from Factory AI security-engineer plugin.

When to Use This Skill

• First-time setup - New repository needs initial threat model
• During /flux:scope - Evaluate security of PRDs and technical plans
• Architecture changes - Significant changes to components, APIs, or data flows
• Security audit - Periodic review or compliance requirement
• Manual request - Security team requests updated threat model

Inputs

Before running this skill, gather or confirm: