WorldThreatModel

WorldThreatModel is a skill for Claude Code, Codex from danielmiessler/LifeOS. It costs 94 tokens per session (1,634 once invoked), scanned A, original, MIT.

A scenario-analysis tool that tests ideas, strategies, and investments across time horizons from six months to fifty years.

In plain words
What is it for?
Use it to build probability-weighted future scenarios, update world models, and examine plans at different levels of analysis depth.
Why use it?
It helps reveal risks that appear only when geopolitics, technology, economics, society, environment, or security conditions change over time.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: reads .claude/ paths.

Good fit Use it to build probability-weighted future scenarios, update world models, and examine plans at different levels of analysis depth.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/danielmiessler/lifeos/worldthreatmodel
About the project

LifeOS is an AI-assisted personal operating system that records a person’s goals, values, context, and current situation to help move them toward a desired future state. It supports work such as building applications, starting businesses, and creative projects. Its catalogue entries extend the system through skills, hooks, agents, and commands.

danielmiessler/LifeOS · 18,932 stars · on GitHub · ourlifeos.ai

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add danielmiessler/LifeOS --skill worldthreatmodel
Clone the repo
git clone --depth 1 https://github.com/danielmiessler/LifeOS

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for WorldThreatModel

README.md
[![agentmods](https://agentmods.dev/badge/skills/danielmiessler/lifeos/worldthreatmodel/github.svg)](https://agentmods.dev/skills/danielmiessler/lifeos/worldthreatmodel)
Your own site
<a href="https://agentmods.dev/skills/danielmiessler/lifeos/worldthreatmodel"><img src="https://agentmods.dev/badge/skills/danielmiessler/lifeos/worldthreatmodel/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for WorldThreatModel

Your own site · 80×15
<a href="https://agentmods.dev/skills/danielmiessler/lifeos/worldthreatmodel"><img src="https://agentmods.dev/badge/skills/danielmiessler/lifeos/worldthreatmodel.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 94 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,634 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Data Exfiltration · line 93
    Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
    Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00094 $0.01634
Opus 5 $0.00047 $0.00817
Sonnet 5 $0.00019 $0.00327
Haiku 4.5 $0.00009 $0.00163

Measured 5d ago against content hash aace16d565e4, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

WorldThreatModel scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s -X POST http://localhost:31337/notify \
LifeOS/install/skills/WorldThreatModel/SKILL.md · 138 lines

How it starts

The opening of the file, as written. The whole thing — 138 lines — stays where its author put it; the contents beside it link to each section on GitHub.

World Threat Model Harness

What It Does

Stress-tests an idea, strategy, or investment against 11 time horizons from 6 months to 50 years. Each horizon is a deep (~10 page) world model covering geopolitics, technology, economics, society, environment, security, and wildcards. Three speed tiers: Fast (~2 min, single synthesizer), Standard (~10 min, 11 parallel agents plus RedTeam and FirstPrinciples), Deep (~1 hr, adds Research and Council). Three workflows: TestIdea returns a probability-weighted scenario matrix across all 11 horizons; UpdateModels and ViewModels handle the rest. (A dedicated TestScenario workflow for named alternative-future scenarios is planned, not yet built — scenario files under Scenarios/ are consumed by TestIdea today.)

The Problem

Most plans get tested against the present, or against the next year or two at most — so they break the moment the world shifts on a timeline you never modeled. A strategy that looks great at the 1-year horizon can be fatal at 10 years, and a 50-year bet can ignore the near-term cascade that kills it first. Holding all those horizons in your head at once, with real geopolitical, economic, and technological reasoning behind each, is more than any single pass can do. This harness keeps 11 persistent world models warm and runs your idea against all of them at the same time, with adversarial analysis on top.

How It Works

A system of 11 persistent world models spanning 6 months to 50 years. Each model is a deep (~10 page) analysis of geopolitics, technology, economics, society, environment, security, and wildcards for that time horizon. Ideas, strategies, and investments are tested against ALL horizons simultaneously using adversarial analysis (RedTeam, FirstPrinciples, Council).

Workflow Routing

Workflow Trigger File
TestIdea "test idea", "test strategy", "test investment", "how will this hold up", "stress test", "test against future" — test any input against all 11 world models Workflows/TestIdea.md
UpdateModels "update world model", "update models", "refresh models", "new analysis" — refresh world model content with new research/analysis Workflows/UpdateModels.md
ViewModels "view world model", "show models", "current models", "model status" — read and summarize current world model state Workflows/ViewModels.md

Read the full file on GitHub · 138 lines

Files

What ships with it

5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 138 lines · 94 tokens per session scan A aace16d565e4

Subscribe to this mod's changes

WorldThreatModel is a skill published in the GitHub repository danielmiessler/LifeOS (18,932 stars, last pushed 4d ago), licensed MIT. It adds 94 tokens to every session and 1,634 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

plan-devex-review

Interactive developer experience plan review. Explores developer personas, benchmarks against competitors, designs magical moments, and traces friction points before scoring. Three modes: DX EXPANSION (competitive advantage), DX POLISH (bulletproof every touchpoint), DX TRIAGE (critical gaps only). Use when asked to…

Global-mindee/WAY · 156 tokens

plan-tune

Self-tuning question sensitivity + developer psychographic for gstack (v1: observational). Review which AskUserQuestion prompts fire across gstack skills, set per-question preferences (never-ask / always-ask / ask-only-for-one-way), inspect the dual-track profile (what you declared vs what your behavior suggests), and…

Global-mindee/WAY · 170 tokens

i-have-adhd

Action-first, zero-filler replies for a reader who loses the thread in prose. Use when the user asks for terse or direct answers, says too long, get to the point, tldr, stop rambling, or when replies keep getting cut off or ignored.

Zfinix/aster · 60 tokens

shortcuts

Run Apple Shortcuts on this Mac: list the available shortcuts first, then run one by exact name with optional input. Use when the user wants to trigger a shortcut or asks what shortcuts exist.

Zfinix/aster · 0 tokens

aster-capabilities

The complete map of what Aster can do and the exact command, flag, slash command, key, or config for each: install and sign-in, the chat TUI, permission modes and rules, every agent tool, review and fix, sessions, memory, config/keys/provider/model, mom.yaml routing, skills, plugins, MCP, web tools, sub-agents and…

Zfinix/aster · 0 tokens

tabw

Use when the user asks to "continue every session", "send this to all windows", "/ar:tabw". Acts on Claude sessions across tmux windows; destructive to in-flight work, so it states what it will do before doing it.

ahundt/autorun · 53 tokens