pytm
关于
pytm enables programmatic threat modeling in Python using the pytm library to automatically generate data flow diagrams and identify STRIDE-based security threats. It's ideal for integrating threat modeling into CI/CD pipelines, maintaining threat models as code, and producing actionable security reports. Developers should use it when they need to analyze system architectures for vulnerabilities across trust boundaries and shift security left in their development process.
快速安装
Claude Code
推荐npx skills add rohunj/claude-build-workflow -a claude-code/plugin add https://github.com/rohunj/claude-build-workflowgit clone https://github.com/rohunj/claude-build-workflow.git ~/.claude/skills/pytm在 Claude Code 中复制并粘贴此命令以安装该技能
GitHub 仓库
Frequently asked questions
What is the pytm skill?
pytm is a Claude Skill by rohunj. Skills package instructions and resources that Claude loads on demand, so Claude can perform pytm-related tasks without extra prompting.
How do I install pytm?
Use the install commands on this page: add pytm to Claude Code as a plugin, or clone its repository into your skills directory, then restart Claude so it picks up the skill.
What category does pytm belong to?
pytm is in the threatmodel category, tagged threat-modeling, stride, dfd, security-architecture, pytm and appsec.
Is pytm free to use?
Yes. pytm is listed on AIMCP and free to install. It runs inside Claude, so no separate service account is required to use the skill itself.
相关推荐技能
pytm Skill让开发者能够通过Python代码进行自动化威胁建模，实现STRIDE分析和数据流图生成。它支持将威胁建模集成到CI/CD流程中，实现安全左移实践，并自动生成包含缓解建议的安全报告。该工具以代码形式维护威胁模型，便于版本控制和自动化安全分析。
Content Collections 是一个 TypeScript 优先的构建工具，可将本地 Markdown/MDX 文件转换为类型安全的数据集合。它专为构建博客、文档站和内容密集型 Vite+React 应用而设计，提供基于 Zod 的自动模式验证。该工具涵盖从 Vite 插件配置、MDX 编译到生产环境部署的完整工作流。
这个Claude Skill为开发者提供完整的Polymarket预测市场开发支持，涵盖API调用、交易执行和市场数据分析。关键特性包括实时WebSocket数据流，可监控实时交易、订单和市场动态。开发者可用它构建预测市场应用、实施交易策略并集成实时市场预测功能。
该Skill帮助开发者创建OpenCode插件，用于接入命令、文件、LSP等25+种事件。它提供了插件结构、事件API规范和JavaScript/TypeScript实现模式，适合需要拦截操作、扩展功能或自定义事件处理的场景。开发者可通过它快速构建响应式模块来增强OpenCode AI助手的能力。