claude

threat-modeler — STRIDE/EoP gap ritual & self-improvement covenant

Map the probe set onto STRIDE + agentic axes, run the Elevation-of-Privilege gap ritual, and propose new rules via PR (never self-merge).

0 on GitHubby whatbirdisthatv0.1.0MITupdated 5 months agosecurity
/

Plugin threat-modeler from marketplace threat-stack in agentic-underground/skillsentry. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (3)

  • gap-ritual

    Run the STRIDE/Elevation-of-Privilege gap ritual against skillsentry's probe set and propose new rules. Use when the user asks "what threats do we miss?", "what's our STRIDE coverage?", "run the gap ritual", "find detection gaps", or when a new detection class lands. Observes (mechanical matrix + Eo

  • propose-rule

    Draft a new deterministic skillsentry detection rule from a gap and open a PR for human review. Use when the user wants to CLOSE a coverage gap — "add a rule for X", "propose the next rule", "close the publisher-spoofing gap". Authors rule modules + fixtures + corpus, runs every gate, opens a PR — n

  • threat-model

    Threat-model a system or design using the Four-Question Framework + STRIDE + the two agentic axes (temporal, cognitive). Use when the user asks to "threat model" something, wants a STRIDE analysis, "what can go wrong with this design?", or to reason about an agentic/LLM/MCP system's risks. Grounded

Slash commands (3)

  • /threat-modeler:gap-ritual

    Run the STRIDE/EoP gap ritual against skillsentry's probe set — write a gap analysis and machine-readable gaps.json.

  • /threat-modeler:propose-rule

    Draft a new deterministic detection rule from a gap and open a PR — the covenant's act step (never self-merges).

  • /threat-modeler:threat-model

    Threat-model a system (or skillsentry itself) with the Four Questions + STRIDE portals + agentic axes.

Subagents (1)

  • threat-modeler

    Adversarial threat-modelling agent for the threat-stack platform. Runs the STRIDE/Elevation-of-Privilege gap ritual against skillsentry's probe set, builds the mechanical coverage matrix, deals the EoP deck to surface ABSENT/THIN cells, and drafts new deterministic RuleSpec data — then opens a PR. I

View source on GitHub

More from agentic-underground/skillsentry

All 4 plugins →

threat-stack — platform front door & concierge

claude

Front door: greet, explain the AUDIT ▸ MODEL ▸ EXTEND flow, list installed plugins, and consolidate readiness. A thin orchestrator that delegates to the specialists.

4 commands · hooks

0

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-metaharness

claude

MetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint

13 skills · 1 command · 1 agent · hooks

ruvnet/ruflo 81,589

AAS Secure App Builder

codex

Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain threat-modeler — STRIDE/EoP gap ritual & self-improvement covenant?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins4 plugins