Agent capability

threat-model-analyst

Full STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis — full STRIDE-A threat model of a repository, producing architecture overviews, DFD diagrams, STRIDE-A analysis, prioritized findings, and executive assessments. (2) Incremental analysis — takes a previous threat model report as baseline, compares the codebase at the latest (or a given commit), and produces an updated report with change tracking (new, resolved, still-present threats), STRIDE heatmap, findings diff, and an embedded HTML comparison. Only activate when the user explicitly requests a threat model analysis, incremental update, or invokes /threat-model-analyst directly.

Compatible agent runtimes 19 files 336,638 bytes

Runtime provisioning

Provision this capability

The provisioning flow resolves the versioned manifest, verifies every SHA-256 digest, and applies the package atomically.

Shared Agent Skills

User scope: ~/.agents/skills/threat-model-analyst

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh threat-model-analyst --client agents --scope user --registry __MM_RUNTIME_ORIGIN__

Codex

User scope: ~/.agents/skills/threat-model-analyst

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh threat-model-analyst --client codex --scope user --registry __MM_RUNTIME_ORIGIN__

OpenCode

User scope: ~/.config/opencode/skills/threat-model-analyst

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh threat-model-analyst --client opencode --scope user --registry __MM_RUNTIME_ORIGIN__

Antigravity

User scope: ~/.gemini/config/skills/threat-model-analyst

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh threat-model-analyst --client antigravity --scope user --registry __MM_RUNTIME_ORIGIN__
Windows PowerShell
$installer = Join-Path $env:TEMP 'mm-skills-install.ps1'; Invoke-WebRequest '__MM_RUNTIME_ORIGIN__/install.ps1' -OutFile $installer; & $installer -Skill 'threat-model-analyst' -Client 'agents' -Scope 'user' -Registry '__MM_RUNTIME_ORIGIN__'

Artifact integrity

Versioned package contents

Inspect manifest
PathBytesSHA-256
LICENSE.txt 1,059 e32449d23085399a…
references/analysis-principles.md 29,612 562192640edcf90a…
references/diagram-conventions.md 18,913 e52bed6507011965…
references/incremental-orchestrator.md 34,324 97fa654229437567…
references/orchestrator.md 55,106 a84b76ee89c23118…
references/output-formats.md 59,862 5fff8b2f9865f8b3…
references/skeletons/skeleton-architecture.md 6,263 924a0e8b686984d8…
references/skeletons/skeleton-assessment.md 11,366 aa82a3ed7c5e804b…
references/skeletons/skeleton-dfd.md 3,387 a8714990f92c90d5…
references/skeletons/skeleton-findings.md 7,848 e1134061c80355ea…
references/skeletons/skeleton-incremental-html.md 5,404 96046484ea50118a…
references/skeletons/skeleton-inventory.md 5,431 9dfb397fe59b4b15…
references/skeletons/skeleton-stride-analysis.md 6,341 310c9970606103ef…
references/skeletons/skeleton-summary-dfd.md 2,830 f1b7b730a542b0e0…
references/skeletons/skeleton-threatmodel.md 2,223 b47b4862e87777a9…
references/tmt-element-taxonomy.md 8,658 91d5db8eeefe3929…
references/verification-checklist.md 71,568 549b54f75ce46666…
SKILL.md 5,870 cdd72b75b224b20f…
SOURCE.md 573 ef1bbdecf482624c…