tachi-threat-reporting

Transform structured threat model outputs into narrative threat reports with Mermaid attack trees.

86|21|Updated Mar 21, 2026

Search Tags:#mermaid #threat-modeling #maestro #threat-report #attack-trees #template-guidance #narrative-analysis

Ready to run

npx skills add https://github.com/davidmatousek/tachi --skill tachi-threat-reporting

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: tachi-threat-reporting
Source: https://github.com/davidmatousek/tachi/tree/main/.claude/skills/tachi-threat-reporting
Command: npx skills add https://github.com/davidmatousek/tachi --skill tachi-threat-reporting

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Domain knowledge and templates for transforming structured threat model outputs into narrative threat reports, including executive summaries, architecture overviews, per-category narratives, Mermaid attack trees, and reference examples.

Core Features & Use Cases

Narrative templates for executive summary, architecture overview, per-category threat analysis, cross-cutting themes, remediation roadmap, and finding reference appendix
Mermaid attack tree conventions, construction rules, and reference examples
On-demand loading of reference materials via the Read tool during report generation

Quick Start

Use this skill to generate a narrative threat report by applying the templates and reference attack trees.

Frequently Asked Questions about tachi-threat-reporting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a narrative threat report from structured threat model outputs?▼

To generate a narrative threat report from structured threat model outputs, apply domain knowledge templates that transform the data into executive summaries, architecture overviews, and per-category threat narratives.

What is the best way to create Mermaid attack trees for threat modeling?▼

Creating Mermaid attack trees for threat modeling involves applying specific construction rules and conventions to visually map attacker narratives, using provided reference examples to ensure accurate diagram syntax.

What sections should be included in a comprehensive threat report?▼

A comprehensive threat report should include an executive summary, architecture overview, per-category threat analysis, cross-cutting themes, remediation roadmap, and a finding reference appendix.

Do I need structured threat model data before generating threat report narratives?▼

Yes, generating threat report narratives requires structured threat model outputs as input data, which the reporting templates then transform into the final textual analysis and diagrams.

Can I load reference materials on demand during threat report generation?▼

Yes, you can load reference materials on demand during threat report generation via the Read tool, allowing the threat-report agent to access templates and attack tree examples dynamically.