New tool2026-10-28via GitHubAI Coding Tools for Developers

Grim Prompter

Name: Grim Prompter
Author: Jim Manico (Manicode Security)

Grim Prompter is an MIT-licensed library of threat-modeling prompts and a threat-model skill for Claude Code, Codex and other coding agents, with 36 architecture workflows and 29 method prompts that produce a threat model with file-and-line evidence from your repo.

Visit Grim Prompter ↗

Free (open source)MITMarkdown prompts (no code to run)★ 210 (as of 2026-10-30)by Jim Manico (Manicode Security)

Why it matters

For developers and security teams who need a threat model but don't have a security specialist on hand. It turns a coding agent into a structured, evidence-cited reviewer of the code, trust boundaries and mitigations, and can re-check a branch against a saved baseline.

Highlights

Installs as a threat-model skill for Claude Code (/threat-model) and Codex ($threat-model); other agents follow it through a snippet in AGENTS.md, CLAUDE.md or GEMINI.md.
Quick runs, a six-stage deep analysis, a single method such as STRIDE per element, or a change review of a branch against an earlier JSON baseline.
36 architecture workflows (web, API, mobile, RAG, agentic AI, CI/CD, IoT and more) and 29 methods including STRIDE, PASTA, LINDDUN, attack trees, MITRE ATLAS and CVSS.
The runbook asks for read-only inspection and file-and-line citations; builds, tests, installs and network access need your explicit authorization.
Writes SYSTEM_UNDER_REVIEW.md, report.md and JSON artifacts into a threat-model/ folder, and maps MCP tools to backend credentials where evidence supports it.

Taken from the project's own README, docs or launch page. Claims about speed or accuracy are the maker's unless stated otherwise.

Try it if: You're shipping an app or MCP server and want a first-draft threat model your coding agent can back with citations.

Worth knowing: The README calls the prompts drafts: a threat model doesn't certify a system is secure, and reports may contain sensitive details, so review them before committing. The author also sells commercial secure-coding prompts at manicode.ai.

Quick facts

Pricing	Free
Free or paid	Free (open source)
License	MIT
Language	Markdown prompts (no code to run)
Platform	Any coding agent; install commands shown for a macOS or Linux shellnot verified
GitHub stars	★ 210 (as of 2026-10-30)
Maker	Jim Manico (Manicode Security)

Related ranking

See how established tools compare in Best AI Coding Tools for Developers. New releases aren't scored until we review them against the rubric.

What we couldn't verify

quick_facts.platform (Windows not mentioned)

Checked 2026-10-30 from the tool's own pages. Prices and star counts change, so confirm on the official site. Listing here is not a ranking or an endorsement.