{"name":"@crewd/threat-modeling","version":"1.0.0","type":"skill","description":"Run a structured STRIDE-style threat model on a design.","integrity":"sha256-118d9bd8b558e7b665069273a39082e3dc5c510c20134147f613925072ecd987","tarball_url":"https://localhost:3000/api/v1/tarballs/crewd/threat-modeling/1.0.0","tarballUrl":"https://localhost:3000/api/v1/tarballs/crewd/threat-modeling/1.0.0","size_bytes":306,"hosts":["claude-code","cursor","gemini-cli"],"manifest":{"name":"@crewd/threat-modeling","type":"skill","entry":"SKILL.md","hosts":["claude-code","cursor","gemini-cli"],"schema":"https://crewd.dev/schema/skill/v1","content":"---\nname: threat-modeling\ndescription: \"Run a structured STRIDE-style threat model on a design.\"\n---\n\n# Threat Modeling\n\nUse this skill when reviewing a design for security.\n\n## Steps\n\n1. Draw components, data stores, external actors and **trust boundaries**.\n2. For each element and data flow, ask the STRIDE questions below.\n3. Rate each threat: likelihood x impact (low/medium/high).\n4. Choose a mitigation or record an explicit risk acceptance.\n\n## STRIDE\n\n| Letter | Threat | Typical control |\n| :--- | :--- | :--- |\n| S | Spoofing identity | Strong authentication |\n| T | Tampering | Integrity checks, signing |\n| R | Repudiation | Audit logs |\n| I | Information disclosure | Encryption, access control |\n| D | Denial of service | Rate limits, quotas |\n| E | Elevation of privilege | Least privilege, authorisation checks |\n","version":"1.0.0","description":"Run a structured STRIDE-style threat model on a design."},"scripts":[],"dependencies":[],"deprecated":null,"created_at":"2026-10-18T17:02:38.435296+00:00"}