jmanico/grim-prompter

选用指南

AI 根据 README 整理 · 2026/10/29 04:31:22

使用方式

通过将 threat-model 技能链接到 Claude Code 或 Codex CLI 使用，也可通过 AGENTS.md 集成到其他代理。

查看 README 依据

**Threat model your project with Claude Code, Codex, or another coding agent.** Grim Prompter provides 36 architecture workflows and 29 method and analysis prompts. Your agent follows a structured review of the code, trust boundaries, threats, existing controls, and proposed mitigations, with evidence you can check. ## Install Clone once, then link the `threat-model` skill into your agent. Check for an existing installation before running these commands. ```bash git clone https://github.com/jmanico/grim-prompter.git ~/grim-prompter # Claude Code

mkdir -p ~/.claude/skills && ln -s ~/grim-prompter/skills/threat-model ~/.claude/skills/threat-model # Codex CLI mkdir -p ~/.agents/skills && ln -s ~/grim-prompter/skills/threat-model ~/.agents/skills/threat-model ```

部署要求

需要 macOS 或 Linux 本地 shell，并已安装 Claude Code 或 Codex CLI 等编码代理。

查看 README 依据

These commands use a local macOS or Linux shell. Keep the clone where it is, since the skill links to its prompts, and avoid duplicate installations. Start a new agent session when you're done. Installation details: [Codex](https://learn.chatgpt.com/docs/build-skills#where-codex-loads-local-skills) and [Claude Code](https://code.claude.com/docs/en/skills#choose-where-skills-load). For any other agent, add the [project snippet](#use-with-any-agent) to your project's `AGENTS.md`. ## Run it Open your project in your coding agent and ask: | You want | Claude Code | Codex CLI |

已知限制

提示词为草稿，输出需人工审查；威胁模型不保证系统安全。

查看 README 依据

4. **Verify the fixes.** Review each proposed test's pass, fail, and inconclusive criteria. Authorize execution separately and record actual results. A plan is not a passed test. 5. **Keep the model current.** Review code changes against the saved JSON baseline and update the evidence as the system changes. These prompts are drafts. Review their output; a threat model does not certify that a system is secure. ## Use with any agent Add this to your project's `AGENTS.md`, `CLAUDE.md`, `GEMINI.md` or equivalent, with the path to your clone: ```markdown ## Threat modeling