csa-plugins-official

SecID — universal security identifier lookup, resolution, and registry research. Resolve CVEs, CWEs, ATT&CK techniques, NIST controls, and 700+ security knowledge sources. Local MCP server calls the SecID REST API with optional --base-url for internal resolvers.

3 commands · 1 agent · 1 MCP server

AI-driven source-code vulnerability audit: a 5-stage methodology (recon, investigate, validate, disclose, learn) with adversarial false-positive filtering and conservative, cooperative disclosure. Static-only; hands off to the defending-code harness for runtime-verified findings.

2 skills

Large-N analysis of the CVE corpus: growth attribution, CNA behaviour profiling, record completeness, and CWE assignment quality. Answers whether CVE growth is real, whether CVE data is improving, and why each CNA participates — with the corpus pitfalls that produce confidently wrong answers.

1 skill

CWE assignment and vulnerability chain analysis for CNAs, security researchers, and vendors. Guides analysts through vulnerability understanding, code examination, CWE identification, chain mapping, and quality validation.

1 skill

Comprehensive security incident analysis with OSINT collection, source cross-referencing, confidence classification, and deep analysis. Teaches analysts the methodology while producing structured reports.

1 skill

Map relationships between security knowledge sources using the NIST IR 8477 methodology. Supports four relationship styles (crosswalk, supportive, set theory, structural), guided use case documentation, cross-model validation, and multiple output formats including OLIR/CPRT-compatible JSON and Excel.

1 skill

Ingest security knowledge documents (standards, regulations, frameworks, controls, capabilities) into structured, machine-readable data. Checks SecID for existing structured data, handles license verification for contributions, produces reproducible conversion recipes, and guides users toward proper data management.

1 skill

CSA's Valid-AI-ted scoring method (published package 1.1.0) with seven documented fixes, and reference data for every current CAIQ and AI-CAIQ version: scores a completed CAIQ (CCM) or AI-CAIQ (AICM) question by question on a 0-4 scale and writes a scored workbook and a summary PDF. An informational, AI-assisted assessment of the written responses, produced by your AI assistant. Read the README's known issues first.

1 skill