Updated 3mo ago
by izar
tm_skills
Agent skills to help with Continuous Threat Modeling
20 GitHub stars (20)
+1 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | +1 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 4 skills (4 skills found in its SKILL.md files)
- 3 forks (3 forks)
- 3mo ago last update (Last updated 3mo ago)
Install
Skills CLI
npx skills add izar/tm_skills
Asks which skills and agents to install. Just one: npx skills add izar/tm_skills --skill '4 Questions pytm' — add -g for every project.
Claude Code
git clone https://github.com/izar/tm_skillscp -r "tm_skills/skills/4qpytm" ~/.claude/skills/
Copies the 4 Questions pytm skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add izar/tm_skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
4 Questions pytm
create an initial PyTM-based threat model of your system by asking questions after the 4 Questions Framework
skills/4qpytm/SKILL.md on GitHub (opens in a new tab) -
ctm
examine a given development story and decide if it has security value that warrants inclusion in a threat model
skills/ctm/SKILL.md on GitHub (opens in a new tab) -
pytm threat model
create an initial PyTM-based threat model of your system when asked to perform a threat model
skills/pytm/SKILL.md on GitHub (opens in a new tab) -
tmnt - Threat Model New Things
given a named technology, library, package, concept or any other form of "idea", perform deep research with threat modeling in mind
skills/tmnt/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
superpowersby obra An agentic skills framework & software development methodology that works.
-
skillsby mattpocock Skills for Real Engineers. Straight from my .agents directory.
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
-
skillsby anthropics Public repository for Agent Skills