Can this skill visualize my application architecture?

Yes, it automatically generates Level 0 and Level 1 Mermaid Data Flow Diagrams (DFDs) that visualize how data moves between components and trust boundaries.

Does it identify specific security vulnerabilities in code?

While it identifies architectural gaps (e.g., missing encryption or auth), it focuses on high-level design threats. It maps these gaps to actionable findings with severity scores.

What is STRIDE analysis in the context of this skill?

STRIDE is a security framework used to identify threats across six categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.

How does the incremental mode work?

By using the --diff flag, the skill compares your current codebase against a stored snapshot in .appsec/model/ to analyze only new or modified components, saving time on large projects.

Threat Modeling & Security Architecture

Name: Threat Modeling & Security Architecture
Author: florianbuetow

byflorianbuetow

•

Security & Testing

Automates architecture-level threat modeling and STRIDE analysis to identify security gaps and visualize data flows.

The Threat Modeling skill provides a systematic approach to application security by automatically discovering components, mapping trust boundaries, and performing in-depth STRIDE-per-component analysis. It generates persistent, incremental threat models that evolve alongside your codebase, producing Mermaid data flow diagrams, attack trees, and structured findings to help developers proactively mitigate risks before they reach production.

Key Features

01Multi-level Data Flow Diagram (DFD) generation using Mermaid syntax.

026 GitHub stars

03Comprehensive STRIDE analysis (Spoofing, Tampering, Repudiation, Information Disclosure, DoS, Elevation of Privilege).

04Automated discovery of services, APIs, data stores, and trust boundaries from source code.

05Advanced attack tree generation for high-value targets and DREAD risk scoring.

06Incremental modeling with the --diff flag to analyze changes since the last security review.

Use Cases

01Conducting automated security audits on microservices or monolithic architectures.

02Generating and maintaining security documentation for compliance and internal reviews.

03Identifying security gaps and missing mitigations during the design and development phase.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code model

For use in Claude.ai and ChatGPT

Download Skill