Threat Model Analyst
Install
Claude Code: add the marketplace once, then install.
/plugin marketplace add simplycubed/skills /plugin install threat-model-analyst@simplycubed Any agent (folder)
Download the folder at the source, then drop it into your agent's skills directory.
Folder: threat-model-analyst/
| Agent | Directory |
|---|---|
| Vendor-neutral (Codex, Gemini CLI, …) | .agents/skills/ |
| Claude Code | ~/.claude/skills/ |
| Gemini CLI | ~/.gemini/skills/ |
Summary
Full STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis — full STRIDE-A threat model of a repository, producing architecture overviews, DFD diagrams, STRIDE-A analysis, prioritized findings, and executive assessments.…
Details
Passed automated static scanning. A point-in-time review, not a guarantee it is safe to run.
Scanned 2026-07-07: certify builtin · gitleaks 8.18.4 · osv-scanner 2.4.0 · semgrep n/a (no code)
✓ All checks clean
Flagged for review (non-blocking):
- analysis-principles.md: exfiltration vocabulary
- output-formats.md: reference to secret/credential files
- tmt-element-taxonomy.md: reference to secret/credential files
Credits
Written by GitHub awesome-copilot contributors
Keywords
#threat #model #analyst