threat-model-analyst
Full STRIDE-A threat model analysis and incremental update skill
by githubFree
Description
threat-model-analyst is an agent skill from the github/awesome-copilot collection that performs full STRIDE-A threat model analysis, which adds abuse cases to the STRIDE categories, for repositories and systems. It also applies Zero Trust principles and defense-in-depth analysis, and it flags secrets, insecure trust boundaries and architectural risks. It works in two modes. A single analysis covers the whole system. An incremental mode is preferred for follow-up work: when the user asks to update, refresh or re-run a threat model and a prior report folder exists, the skill compares the current code with the baseline report and reports what has changed. The baseline is either named by the user or found as the most recent threat model folder that holds a threat inventory file. The mode is chosen first, from the wording of the request and the folders that are present. It is useful for security teams and developers who want a structured review of a system, and for keeping a threat model current as the code changes. The findings are the agent's analysis, so the threats it lists should be assessed for likelihood and impact by people who know the system. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 1.5K installs and passing results from three security audits at the time of the scan.…
Highlights
- STRIDE-A threat modeling with abuse cases
- Zero Trust and defense-in-depth analysis
- Flags secrets and insecure trust boundaries
- Single and incremental modes
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate threat-model-analyst.
People also visit
mtls-configuration
Configure mutual TLS (mTLS) for zero-trust service-to-service communication
threat-model-analyst FAQ
What is STRIDE-A?
STRIDE with abuse cases added to the threat categories.
What is incremental mode?
A follow-up analysis that compares the current code with a baseline report and reports what changed.
How is the mode chosen?
From the wording of the request and the threat model folders present, with incremental preferred for updates.
How do I install it?
Run npx skills add https://github.com/github/awesome-copilot --skill threat-model-analyst.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best threat-model-analyst alternatives?
Popular alternatives to threat-model-analyst include stride-analysis-patterns, attack-tree-construction and mtls-configuration. See all threat-model-analyst alternatives