threat-model
Installation
SKILL.md
Overview
Based on Threat Modeling: Designing for Security (Adam Shostack). Threat modeling is structured adversarial thinking applied before code ships. Shostack's standard: the goal is not to find every bug - it's to find the worst things that can happen to your system and decide what to do about each one. A threat model is not a security audit; it is a design artifact.
STRIDE framework (Shostack):
- Spoofing - impersonating a user or system
- Tampering - modifying data or code
- Repudiation - denying an action occurred
- Information disclosure - exposing data to unauthorized parties
- Denial of service - degrading or blocking availability
- Elevation of privilege - gaining access beyond what's authorized