fr33d3m0n

Skill Threat Modeling — Security skill for Claude Code

Security community intermediate

Code-First Deep Risk Analysis Skill for Claude Code - 8-Phase Workflow with Security design review, STRIDE Threat modeling, PenTest and attack chain analysis, Software compliance assessment.

How to install Skill Threat Modeling

This entry records only its repository, not the path inside it, so there is no exact command to give. Open fr33d3m0n/threat-modeling and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Skill Threat Modeling does

AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security analysis, security audit, and penetration testing.

Alternatives in Security

  • Claude Leaked Files — Mirrored snapshot of Claude Code's source (exposed 2026-03-31) preserved for educational purposes, defensive s 256 ★
  • Sail Skill — SAIL V2 (Secure AI Lifecycle) as an agent skill — the full 91-risk catalog for AI/agent gap assessments, secur 122 ★
  • Kali Pentest — Kali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent) 100 ★

README

Threat Modeling Skill v3.1.0

AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security analysis, security audit, and penetration testing.

What's New in v3.1.0

  • Comprehensive code quality audit and optimization to better align with current skill specifications
  • Significantly enhanced agent and skill security analysis and assessment capabilities
  • Full OWASP MCP Top 10 (2025) coverage with official MCP01:2025-MCP10:2025 alignment
  • SAO behavioral model (Subject-Action-Object) for systematic agent threat enumeration
  • 13 pre-built agent attack chains with MITRE ATT&CK technique sequences
  • Trust inversion model formalizing SKILL.MD = UNTRUSTED paradigm for agent security

See [CHANGELOG.md](CHANGELOG.md) for full version history.

What's New in v3.0.2

  • Major system architecture refactoring, improved security analysis depth and path coverage
  • Backported SM2 state machine from next-gen AI-Native penetration testing system named "Cobweb" for problem-solving in depth
  • Added multi-version task history and precise structured phase outputs for CI/CD integration
  • Optimized context engineering and data disclosure, ~35% token reduction

See [CHANGELOG.md](CHANGELOG.md) for full version history.

Installation

Option 1: Global Installation (Recommended)

# Clone to global skills directory
git clone https://github.com/fr33d3m0n/threat-modeling.git \
    ~/.claude/skills/threat-modeling

# Enable hooks (optional, for automatic validation)
cp ~/.claude/skills/threat-modeling/hooks/settings-example.json \
   ~/.claude/settings.json

Option 2: Project-Local Installation

# Clone to project's .claude/skills directory
mkdir -p .claude/skills
git clone https://github.com/fr33d3m0n/threat-modeling.git \
    .claude/skills/threat-modeling

Requirements

  • Claude Code CLI
  • Python 3.10+
  • SQLite3 (for knowledge base queries)

Quick Start

...

Related Skills

Modern Threat Model — Security skill for Claude Code

Modern Threat Model

STRIDE threat-modeling skill for Claude. Turns an idea, diagram, or code repo into a DFD, threat ledger, score

Security community
J Audit — Security skill for Claude Code

J Audit

Security threat model and vulnerability scan — STRIDE analysis, SAST patterns, and compliance mapping. Use whe

Security community
Security Engineer — Security skill for Claude Code

Security Engineer

Expert application security engineer specializing in threat modeling, vulnerability assessment, secure code re

Security community
Code Review Audit — Security skill for Claude Code

Code Review Audit

Audit mode for code-review: multi-pass deep-dive with zero-tolerance posture, API hallucination detection, and

Security community
Audit Software — Security skill for Claude Code

Audit Software

Audit software inventory across devices using ZDX data for compliance and vulnerability assessment.

Security community
Audit Infra — Security skill for Claude Code

Audit Infra

Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE. Complem

Security community

Related Agents

Pan Hardener — Security agent for Claude Code

Pan Hardener

Security audit agent — OWASP Top 10 + STRIDE threat modeling across files changed in a phase. Read-only. Spawn

Security community
Threat Modeling Expert — Security agent for Claude Code

Threat Modeling Expert

Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters... - wshob

Security community
SecurityArchitect — Security agent for Claude Code

SecurityArchitect

Security policy architect — threat modeling, security posture, policy design, architectural risk. USE WHEN sec

Security community