Map the probe set onto STRIDE + agentic axes, run the Elevation-of-Privilege gap ritual, and propose new rules via PR (never self-merge).
3 skills · 3 commands · 1 agent
0
Plugin marketplace
threat-stack
A marketplace of threat-intelligence tools for AI-agent supply-chain security (AUDIT ▸ MODEL ▸ EXTEND). The anchor is skillsentry, a static auditor that never executes what it scans; around it sit an agentic threat-modeler (STRIDE + Elevation-of-Privilege gap ritual) and opt-in extensions. Each plugin stands alone; per-plugin detail lives in each plugin.json.
Add this marketplace
Then install any plugin below by name — each page has its exact command.
Front door: greet, explain the AUDIT ▸ MODEL ▸ EXTEND flow, list installed plugins, and consolidate readiness. A thin orchestrator that delegates to the specialists.
4 commands · hooks
0
Audit an AI-agent skill/plugin for supply-chain attacks before it runs (PASS/REVIEW/BLOCK), via the in-repo skillsentry CLI. Detection stays in the deterministic CLI, never the agent context.
1 skill · 1 command
0
Opt-in Semgrep SAST extension (separate trust model); shells to an external semgrep if installed and never touches the auditor's zero-dependency core. Off by default.
1 command
0
README badge
Shows how many plugins this repo ships, and links here.
claude & codex plugins4 plugins