threat-modeling — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited threat-modeling (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When analyzing security threats to a system, component, or feature. When constructing attack trees, identifying trust boundaries, or scoring risks using structured methodologies.
threat-modeler persona.Apply STRIDE to each trust boundary crossing:
| Threat | Question | Example |
|---|---|---|
| Spoofing | Can an attacker pretend to be someone else? | Forged auth tokens, session hijacking |
| Tampering | Can data be modified in transit or at rest? | Man-in-the-middle, DB manipulation |
| Repudiation | Can actions be denied without proof? | Missing audit logs, unsigned transactions |
| Information Disclosure | Can sensitive data leak? | Error messages with stack traces, verbose APIs |
| Denial of Service | Can the system be overwhelmed? | Unbounded queries, missing rate limits |
| Elevation of Privilege | Can a user gain unauthorized access? | Missing authz checks, IDOR, path traversal |
Score each identified threat (1-10 for each dimension):
| Dimension | 1 (Low) | 5 (Medium) | 10 (High) |
|---|---|---|---|
| Damage | Minor inconvenience | Data loss for some users | Full system compromise |
| Reproducibility | Requires rare conditions | Requires specific setup | Anyone can reproduce |
| Exploitability | Requires deep expertise | Requires some skill | Script kiddie level |
| Affected Users | Single user | Subset of users | All users |
| Discoverability | Hidden, requires source | Findable with effort | Obvious, publicly known |
Risk Score = (D + R + E + A + D) / 5
For high-scoring threats, build an attack tree:
[Goal: Unauthorized admin access]
├── [OR] Steal admin credentials
│ ├── [AND] Phish admin user
│ │ ├── Send convincing email
│ │ └── Capture credentials on fake page
│ └── [AND] Exploit password reset
│ ├── Enumerate valid emails
│ └── Intercept reset token
└── [OR] Escalate from regular user
├── [AND] Exploit IDOR
│ ├── Find predictable resource IDs
│ └── Access admin endpoints directly
└── [AND] Exploit role assignment bugWrite to .planning/THREAT-MODEL-[component]-[timestamp].md:
# Threat Model: [Component]
Date: [timestamp]
Scope: [what was analyzed]
## Data Flow Diagram
[ASCII or description of data flow with trust boundaries marked]
## Trust Boundaries
1. [boundary]: [what crosses it]
## Identified Threats
| # | Category | Threat | DREAD Score | Mitigation | Status |
|---|----------|--------|-------------|-----------|--------|
## Attack Trees (for High/Critical threats)
[Trees for any threat scoring 7+]
## Recommendations
[Prioritized list of mitigations]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.