blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
4
claude
threat-modeling
Threat modeling with STRIDE, attack trees, DREAD risk ranking, and MITRE ATT&CK mapping that turns a design into ranked threats with concrete mitigations.
/
Plugin threat-modeling from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (3)
attack-treesAttack tree methodology: notation, AND/OR decomposition, reusable tree templates, path analysis, advanced techniques, and using trees to make defense decisions. Use when decomposing an attacker goal into analyzable paths.
stride-methodologySTRIDE-per-element analysis with threat catalogs and mitigation patterns for common components (web applications, APIs, databases, message queues, cloud services) and an incremental threat modeling process. Use when walking a system or data flow diagram through STRIDE in depth.
threat-modelingChecklist-level threat modeling reference: STRIDE and DREAD summaries, a trust boundary checklist, common STRIDE threats per component, frequent MITRE ATT&CK techniques, example attack trees for tenant data theft and account takeover, and a catalog of common threat modeling mistakes. Use when you ne
Slash commands (1)
/threat-modeling:threat-modelProduce a structured threat model for the described system or feature: scope, data flows, STRIDE threats ranked by DREAD, mitigations, accepted risks, and open questions.
Subagents (2)
attack-tree-builderUse this agent when you have a concrete attacker objective, such as stealing payment data or taking over an admin account, and need it decomposed into specific attack paths. It builds an annotated AND/OR attack tree with cost, skill, and detection estimates, finds the cheapest and uncontrolled paths
threat-modelerUse this agent when designing a new feature, changing architecture, or preparing a pre-launch or audit security review. It builds a structured threat model: trust boundaries, data flows, a STRIDE walk, DREAD or CVSS ranking, verifiable mitigations, and detection plans for accepted risks; attack-tree
More from HermeticOrmus/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
4
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
4
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
4
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
4
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
4
Similar plugins
ruflo-metaharness
claudeMetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint
13 skills · 1 command · 1 agent · hooks
ruvnet/ruflo 81,589
Codex Security
codexCodex Security workflows for security scans, analysis, and investigation.
15 skills · 1 MCP server · app connector
openai/plugins 7,914
seedance-horror-suspense
claudeEvery shot carries its own timecode and shows one visible change on a body. The dread comes from the chain — a look, veins, a bite, the next person — and the ending seals a door without settling anything.
1 skill
LearnPrompt/awesome-seedance 2,520
EndoStack
codexSecurity-first workflows for coding agents that threat-model, security-review and verify code changes before they ship, across Codex, Claude Code, Cursor and Copilot.
62 skills
hashgraph-online/awesome-codex-plugins 1,566
pm-security
claudeHands-on application & operational security skills: Threat Model (STRIDE), Security Review, Vulnerability Triage (CVSS), Security Incident Response, and Pentest Report. Defensive security and authorized testing for systems you own or are permitted to assess.
6 skills
mohitagw15856/pm-claude-skills 1,544
acm-ccs-skills
claudeTwelve CCS-specific skills for security-conference submission strategy, grounded in the official ACM CCS 2026 Call for Papers, call for artifacts, HotCRP cycle sites, and SIGSAC award and steering pages.
12 skills
brycewang-stanford/Awesome-Journal-Skills 1,413
Maintain threat-modeling?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins