Updated 2mo ago
by wiz-sec-public
SITF
A comprehensive framework for analyzing and defending against attacks targeting Software Development Life Cycle Infrastructure.
182 GitHub stars (182)
+1 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | +1 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 3 skills (3 skills found in its SKILL.md files)
- 18 forks (18 forks)
- 2mo ago last update (Last updated 2mo ago)
Install
Skills CLI
npx skills add wiz-sec-public/SITF
Asks which skills and agents to install. Just one: npx skills add wiz-sec-public/SITF --skill attack-flow — add -g for every project.
Claude Code
git clone https://github.com/wiz-sec-public/SITFcp -r "SITF/.claude/skills/attack-flow" ~/.claude/skills/
Copies the attack-flow skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add wiz-sec-public/SITF
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
attack-flow
Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports. Use when analyzing supply chain attacks, breaches, or security incidents.
.claude/skills/attack-flow/SKILL.md on GitHub (opens in a new tab) -
red-team-flow
Generate SITF-compliant attack flow JSON from red team or pentest reports. Accepts report files, URLs, or pasted findings. Use when documenting offensive security engagements.
.claude/skills/red-team-flow/SKILL.md on GitHub (opens in a new tab) -
technique-proposal
Generate a PR-ready technique proposal when an attack step doesn't map to existing SITF techniques. Use after /attack-flow identifies technique gaps.
.claude/skills/technique-proposal/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
skillsby anthropics Public repository for Agent Skills
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
agent-skillsby addyosmani Production-grade engineering skills for AI coding agents.
-
paperclipby paperclipai The open-source app everyone uses to manage agents at work
-
open-designby nexu-io The 1st Collaborative AI Design Agent Workspace. Local-first and open source. Create prototypes, websites, apps, dashboards, presentations,…