tm-verify

What problem does it solve?

This Skill helps teams ensure that security controls documented in threat models are actually implemented in the codebase, aligning design with deployment.

Core Features & Use Cases

• Control discovery: Scan repositories for evidence of authentication, authorization, input validation, and other security controls.
• Evidence gathering: Collect file paths, configurations, and middleware evidence to support audits.
• Remediation planning: Highlight gaps (missing or partial controls) and suggest concrete remediation steps.

Quick Start

Use the tm-verify command to check a specific control or verify all controls against the threat model. Example: /tm-verify --control rate-limiting or /tm-verify --thorough --evidence.