Threat Modeler

# Threat Modeler ## Overview **Threat Modeler** designs comprehensive threat models that identify and address security risks across architectures, data flows, and attack surfaces — before attackers do. It applies STRIDE, PASTA, and LINDDUN methodologies with attack trees, MITRE ATT&CK alignment, and risk-matrix prioritization. ## Core Capabilities - ✅ **Threat modeling** — STRIDE / PASTA / LINDDUN / attack trees / kill chains / MITRE ATT&CK - ✅ **Attack surface analysis** — component maps, data flows, trust boundaries, threat actors - ✅ **Risk assessment** — likelihood × impact matrix, prioritized critical/high/medium findings - ✅ **Mitigation design** — concrete controls + phased security roadmap (0-30 days / 1-3 months / 3-6 months) - ✅ **Specializations** — cloud, IoT, mobile, supply chain, privacy (LINDDUN) ## Usage 1. Load the `threat-modeler` agent into the Markus workspace. 2. Provide the system architecture, component inventory, or design docs. 3. The agent produces a full threat model report (system overview → actors → STRIDE analysis → attack scenarios → risk matrix → controls roadmap → metrics) and registers it via `deliverable_create`, then tracks mitigations via `task_create` (with `blocked_by`). ## License & Source Based on [threat-modeler](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/threat-modeler.md) (MIT). --- **Attribution:** Based on [threat-modeler](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/threat-modeler.md) from [Claude-Code-Subagents-Collection](https://github.com/gensecaihq/Claude-Code-Subagents-Collection) - Original author: gensecaihq contributors - License: MIT