---
title: "Threat modeling"
type: skill-set
id: "wshobson-agents/threat-modeling"
category: "Security"
publisher: "Seth Hobson"
license: "MIT"
source: "https://github.com/wshobson/agents/tree/7e2fb55"
canonical: "https://labs.pho.chat/en/skills/wshobson-agents/threat-modeling"
open_in_pho: "https://pho.chat/customize?item=wshobson-agents%2Fthreat-modeling&utm_source=labs&utm_medium=skill-page&utm_campaign=skills-library"
---

# Threat modeling

STRIDE analysis, attack trees, security requirements, mitigation mapping and SAST setup.

Source: Seth Hobson (MIT), copied at a pinned commit. Free to use. Part of the Phở Skills library (https://labs.pho.chat/en/skills).

## Skills in this set (5)
- [Attack Tree Construction](https://labs.pho.chat/en/skills/wshobson-agents/threat-modeling/attack-tree-construction.md): Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
- [SAST Configuration](https://labs.pho.chat/en/skills/wshobson-agents/threat-modeling/sast-configuration.md): Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or…
- [Security Requirement Extraction](https://labs.pho.chat/en/skills/wshobson-agents/threat-modeling/security-requirement-extraction.md): Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.
- [STRIDE Analysis Patterns](https://labs.pho.chat/en/skills/wshobson-agents/threat-modeling/stride-analysis-patterns.md): Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.
- [Threat Mitigation Mapping](https://labs.pho.chat/en/skills/wshobson-agents/threat-modeling/threat-mitigation-mapping.md): Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.

## Use it
- In Phở: open https://pho.chat/customize?item=wshobson-agents%2Fthreat-modeling&utm_source=labs&utm_medium=skill-page&utm_campaign=skills-library and press Try, or add it so Phở loads it whenever a request matches. Phở works with your own API key (OpenAI, Anthropic, Google and others).
- Original files: https://github.com/wshobson/agents/tree/7e2fb55 (MIT).
- Full machine-readable index: https://labs.pho.chat/skills.json