# STRIDE Analysis Patterns (stride-analysis-patterns)

> Uses STRIDE to identify threats: spoofing, tampering, repudiation, information disclosure, denial of service and elevation of privilege.

- Category: [Security Audit](https://www.myskills.tools/en/categories/security-audit/)
- Source: Community · Seth Hobson
- Repository: https://github.com/wshobson/agents/tree/main/plugins/security-scanning/skills/stride-analysis-patterns (commit be57c0b)
- SKILL.md: https://github.com/wshobson/agents/blob/main/plugins/security-scanning/skills/stride-analysis-patterns/SKILL.md
- Install command: `npx skills add wshobson/agents --skill stride-analysis-patterns`
- License: MIT
- Compatible with: Claude Code, Codex, Cursor, Copilot, OpenCode
- Permissions: read-repo ✓, write-files ✓, shell ✗, network ✗
- Status: Scan passed
- A rule scan cannot catch every risk. Read this skill's SKILL.md and check its permissions before installing.

## Core rule

Cover all six STRIDE categories and never skip one.

## Execution Phases

1. **Describe the system** — Write a system overview, draw the data flow diagram, and mark the trust boundaries.
2. **List the assets** — List assets such as credentials, personal data, sessions, logs and configuration with their sensitivity.
3. **Analyze each category** — For each STRIDE category, list threats per component or interaction with target, impact and likelihood.
4. **Assess risk** — Rate threats in a risk matrix and prioritize them.
5. **Plan mitigations** — Recommend mitigations for immediate, 30-day and 90-day horizons, and keep the threat model as a living document.

## Permissions (summarised from SKILL.md)

| Capability | Needed | Details |
|---|---|---|
| File writes | Required | Writes threat model documents and related analysis. |
| Command execution | Not required | This is a method with templates and needs no command execution. |
| Network outbound | Not required | The instructions include no network access. |

## SKILL.md frontmatter (YAML)

```yaml
---
name: stride-analysis-patterns
description: Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.
---
```

Home: https://www.myskills.tools/en/ · URL: https://www.myskills.tools/en/skills/stride-analysis-patterns/