Imported from N-PolarStar/shopping-assistant-agent (shopping-assistant/.agents/skills/stride-threat-model/SKILL.md). Install upstream with npx skills add N-PolarStar/shopping-assistant-agent --skill stride-threat-model. Copyright stays with the author.

STRIDE Threat Modeling Skill

Name: stride-threat-model
Author: N-PolarStar

Goal

Guide the agent to analyze the workspace directory structure, configuration files, and code files to produce a structured threat_model.md assessment.

Instructions

Analyze System Boundaries: Map the entry points (tools, workflows, prompts) and data storage layers.
STRIDE Evaluation: Evaluate the system against the six STRIDE pillars:
- Spoofing: Are caller identity boundaries verified before executing sensitive tool logic?
- Tampering: Can users manipulate data flows, parameters, or underlying state?
- Repudiation: Are critical transactions securely logged?
- Information Disclosure: Are we risking leakage of PII, internal tokens, or raw stack traces?
- Denial of Service: Are there rate limits on expensive database or LLM queries?
- Elevation of Privilege: Can an unauthenticated user bypass access control to reach privileged tool actions?
Output: Generate a highly structured threat_model.md saved directly into the workspace root.

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

{ "ocm": "1", "id": "n-polarstar-shopping-assistant-agent-stride-threat-model", "kind": "skill", "name": "stride-threat-model", "description": "Performs a systematic STRIDE threat modeling assessment on the current project's codebase and architecture. Use this when starting a new implementation phase or reviewing existing components.", "publisher": "N-PolarStar", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Performs a systematic STRIDE threat modeling assessment on the current project's codebase and architecture. Use this when starting a new implementation phase or reviewing existing components." ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/N-PolarStar/shopping-assistant-agent", "path": "shopping-assistant/.agents/skills/stride-threat-model/SKILL.md", "ref": "72a8b4089e663b921e0ae32502fcf1286309fb05", "url": "https://github.com/N-PolarStar/shopping-assistant-agent/blob/72a8b4089e663b921e0ae32502fcf1286309fb05/shopping-assistant/.agents/skills/stride-threat-model/SKILL.md", "key": "N-PolarStar/shopping-assistant-agent/shopping-assistant/.agents/skills/stride-threat-model/SKILL.md" } }, "instructions": "# STRIDE Threat Modeling Skill\n\n## Goal\nGuide the agent to analyze the workspace directory structure, configuration files, and code files to produce a structured `threat_model.md` assessment.\n\n## Instructions\n1. **Analyze System Boundaries**: Map the entry points (tools, workflows, prompts) and data storage layers.\n2. **STRIDE Evaluation**: Evaluate the system against the six STRIDE pillars:\n - **Spoofing**: Are caller identity boundaries verified before executing sensitive tool logic?\n - **Tampering**: Can users manipulate data flows, parameters, or underlying state?\n - **Repudiation**:", "cost": { "context_tokens": 263 } }

stride-threat-model

About

STRIDE Threat Modeling Skill

Goal

Instructions

Use it

Manifest

Reviews