Skills
.Work. You
Rest

tm-threats

Community

Identify and prioritize threats to your system.

Data & Analytics#STRIDE#threat-modeling#threat-analysis#risk-register#attack-trees#abuse-cases
Authorjosemlopez
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This skill helps security teams and developers systematically identify, categorize, and prioritize threats against system assets by applying STRIDE or PASTA. It creates a threat catalog, attack trees, abuse cases, and a risk register to inform design decisions and mitigations.

Core Features & Use Cases

  • Threat modeling: Apply STRIDE or PASTA to assets, data flows, and trust boundaries to surface potential threats.
  • Threat catalog & attack trees: Generate a structured catalog of threats and visualize attack paths.
  • Abuse cases & risk register: Identify abuse cases from legitimate workflows and generate prioritized risk entries for remediation.
  • Use Case: Analyze a software architecture to proactively identify and mitigate security risks before deployment.

Quick Start

Use the tm-threats command to analyze threats for your loaded threat model after initializing with /tm-init.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: tm-threats
Download link: https://github.com/josemlopez/threat-modeling-toolkit/archive/main.zip#tm-threats

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.