stride-analysis-patterns (wshobson/agents): a skill for STRIDE threat modeling

This wshobson/agents skill makes Claude walk a system through the six STRIDE threat categories and write the result with ready-made threat model templates.

Installs: 21.7K; on skills.sh
Stars: 42.1K; on GitHub
Files: 1; besides SKILL.md
Updated: Oct 2026; last repo commit

The skill gives Claude the STRIDE method: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service and Elevation of Privilege. Each category comes with a question to ask and a control family, such as authentication, integrity or rate limiting. Claude uses them to look for threats in the system you describe.

It triggers when you analyze system security, run a threat modeling session or write security documentation. A reference file holds four templates: a full threat model document, a STRIDE analysis in Python code, a data flow diagram analysis and a STRIDE-per-interaction analysis.

The skill is short. SKILL.md has the categories, the question table and do and don't rules, and the templates sit in references/details.md. It bundles no scripts, so Claude does not scan your code. You describe the system, and Claude applies the method.

Good for

Engineers starting a threat modeling session for a new system
Security teams reviewing an existing architecture or design decision
Teams preparing threat documentation for compliance or audits

Install stride-analysis-patterns

Claude Code

Copy this prompt.

Install the stride-analysis-patterns skill in Claude Code. Run this command:

npx skills add https://github.com/wshobson/agents --skill stride-analysis-patterns

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

From its listing on skills.sh. Source.

What's in the skill

When it loads

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

Sections in SKILL.md

When to Use This Skill
Core Concepts
1. STRIDE Categories
2. Threat Analysis Matrix
Templates and detailed worked examples
Best Practices
Do's
Don'ts

Key facts

Author: Seth Hobson (wshobson)
License: MIT
Repository: wshobson/agents
Installs on skills.sh: 21,672 as of 2026-11-02
GitHub stars: 42,081 as of 2026-11-02
Last repo commit: 2026-10-30
Files in the skill folder: 2 files including SKILL.md (references/details.md holds the templates)
skills.sh audits: Gen Agent Trust Hub pass, Socket pass, Snyk pass
Part of: The security-scanning plugin in wshobson/agents, a catalog of 94 plugins

What it includes

Six threat types and what each means
Spoofing (authentication), Tampering (integrity), Repudiation (non-repudiation), Information Disclosure (confidentiality), Denial of Service (availability) and Elevation of Privilege (authorization).
STRIDE categories
One question and one control family per category
For example: can an attacker pretend to be someone else, and can they modify data in transit or at rest.
Threat analysis matrix
Markdown document with five sections
System overview with data flow and trust boundaries, assets, STRIDE analysis per category, risk assessment and recommendations by 30 and 90 days.
Read · Template 1: Threat model document
Python example for recording threats
A Python code template for modeling threats by category. Read it in references/details.md.
Read · Template 2: STRIDE analysis code
Python example for analyzing a data flow diagram
Models elements and flows between them for STRIDE review.
Read · Template 3: Data flow diagram analysis
Python example for component interactions
Models interactions between two components and the threats on each.
Read · Template 4: STRIDE per interaction
Best practices from SKILL.md
Involve stakeholders, cover every category, prioritize realistically, update the model and follow through with mitigations.
Do's and don'ts

From the official docs

Questions

What does the stride-analysis-patterns skill do?

It gives Claude the STRIDE threat modeling method and four templates. You describe a system, and Claude walks through each threat category and drafts a threat model with mitigations.

How do I install it in Claude Code, the Claude app or Codex?

Use the install box above. The wshobson/agents README says an individual skill can be installed with gh skill install wshobson/agents <skill> or with the npx skills installer, without the plugin's agents, commands or hooks. It also documents plugin installs for Claude Code and Codex.

Does it scan my code?

No. The skill bundles no scripts. It structures the analysis and templates, and Claude uses the system description and any files you share.

Is it safe to install?

It is two Markdown files with no scripts, API keys or network calls named. The templates include Python example code, which Claude only runs if you ask. Treat any threat model it writes as a draft for your security team to review.

Does it cover mitigations?

Yes. The threat model template has a recommendations section split into immediate actions, 30 days and 90 days, and each category lists mitigations as a checklist. The best-practices list says not to stop at identification.

What is STRIDE?

A method for finding threats by six categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service and Elevation of Privilege. This skill lists a question and control family for each.

Information

updated Nov 2, 2026

Repository: wshobson/agents
Folder: plugins/security-scanning/skills/stride-analysis-patterns

wshobson/agents skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 3

SKILL.md · github.com
references/details.md · github.com
wshobson/agents README · github.com