Generates comprehensive, prioritized security risk reports and executive summaries from threat model data.
The tm-report skill automates the creation of professional security documentation by analyzing threat model states, architecture diagrams, and control inventories. It produces tailored outputs ranging from high-level executive summaries for leadership to detailed technical appendices for engineering teams, complete with risk heat maps, compliance mapping for frameworks like SOC2 and OWASP, and prioritized remediation strategies. This tool is essential for teams needing to maintain audit-ready documentation and clear visibility into their system's security posture within the Claude Code environment.
Key Features
01Automated generation of executive summaries and detailed risk reports
02Prioritized risk scoring based on severity and business impact
03Visual risk distribution using ASCII progress bars and Mermaid architecture diagrams
04Gap analysis and compliance mapping for frameworks like OWASP Top 10 and SOC2
050 GitHub stars
06Multi-format export support including Markdown, JSON, and HTML
Use Cases
01Briefing executive leadership on project-specific security risks and resource requirements
02Preparing security documentation for SOC2 or ISO 27001 audit compliance
03Conducting gap analysis to prioritize security engineering tasks and remediation efforts
