# Threat Modeling

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-alisinadevelo-md-files-threat-modeling`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [AlisinaDevelo](https://agentstack.voostack.com/s/alisinadevelo)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [AlisinaDevelo](https://github.com/AlisinaDevelo)
- **Source:** https://github.com/AlisinaDevelo/md-files/tree/main/plugins/forge/skills/threat-modeling

## Install

```sh
agentstack add skill-alisinadevelo-md-files-threat-modeling
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Threat Modeling

Answer four questions: **What are we building? What can go wrong? What do we do about
it? Did we do a good job?** Do it early — design-time fixes are far cheaper than
post-incident ones.

## 1. Model the system

Sketch the data flow: external entities, processes, data stores, and the flows between
them. Mark **trust boundaries** — every point where data crosses from less-trusted to
more-trusted (internet → server, user → admin, service → database). Threats cluster at
boundaries.

## 2. Enumerate threats — STRIDE

For each element and flow, ask which apply:

| Threat | Property violated | Example |
|--------|-------------------|---------|
| **S**poofing | Authentication | forging a user's identity, stolen token |
| **T**ampering | Integrity | modifying data in transit or at rest |
| **R**epudiation | Non-repudiation | denying an action; no audit trail |
| **I**nformation disclosure | Confidentiality | leaking PII, secrets in logs |
| **D**enial of service | Availability | resource exhaustion, unbounded work |
| **E**levation of privilege | Authorization | user gains admin, IDOR, missing authz |

Walk untrusted input from each entry point to every sink it can reach.

## 3. Decide on controls

For each credible threat, choose: **mitigate** (add a control), **eliminate** (remove the
feature/data), **transfer** (offload to a vetted provider), or **accept** (document the
residual risk and why). Map threats to concrete defenses:

- Spoofing → strong authN, MFA, signed/short-lived tokens.
- Tampering → TLS, integrity checks, server-side validation, least privilege.
- Repudiation → audit logging of security-relevant actions.
- Disclosure → encryption in transit/at rest, minimize data, scrub logs.
- DoS → rate limits, timeouts, quotas, bounded input sizes.
- EoP → authorize every action, default-deny, separation of duties.

## 4. Validate

Did each high-severity threat get a control? Are controls testable? Add tests/alerts for
the important ones. Re-model when the design changes materially.

## Prioritize

Risk = likelihood × impact. Fix the exposed, high-impact, easy-to-exploit issues first.
Don't drown the design in low-severity theoreticals — focus on what an attacker would
actually reach and abuse.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [AlisinaDevelo](https://github.com/AlisinaDevelo)
- **Source:** [AlisinaDevelo/md-files](https://github.com/AlisinaDevelo/md-files)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-alisinadevelo-md-files-threat-modeling
- Seller: https://agentstack.voostack.com/s/alisinadevelo
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.