randori

Plugin randori in allsmog/randori-plugin. Commands read from the repo's manifest — 1 month ago.

Skills (5)

• Attack Tree Generation

  This skill should be used when building attack trees, when the user mentions "attack tree", "attack path", "AND/OR tree", "threat tree", "multi-step attack", or needs to construct structured attack decompositions.

• DFD Generation

  This skill should be used when creating data flow diagrams, when the user mentions "DFD", "data flow diagram", "trust boundaries", "data flows", "Mermaid diagram", or needs to visualize how data moves through the system.

• MITRE ATT&CK Mapping

  This skill should be used when mapping threats to MITRE ATT&CK techniques, when the user mentions "ATT&CK", "MITRE", "T-codes", "attack techniques", "tactics and techniques", "kill chain", or needs to reference the ATT&CK Enterprise framework for threat classification.

• PASTA Methodology

  This skill should be used when the user mentions "PASTA", "threat modeling methodology", "Process for Attack Simulation", "7-stage threat model", "OWASP threat modeling", or needs to understand the PASTA framework stages, outputs, and how they connect.

• STRIDE Classification

  This skill should be used when classifying threats using STRIDE methodology, when the user mentions "STRIDE", "spoofing threats", "tampering threats", "repudiation", "information disclosure", "denial of service", "elevation of privilege", or needs to categorize security threats by type.

Slash commands (9)

• /randori:pasta

  Run a full PASTA threat modeling analysis through all available stages sequentially

• /randori:s1-objectives

  PASTA Stage 1: Define business objectives, security requirements, and compliance context

• /randori:s2-scope

  PASTA Stage 2: Map technical scope — software components, actors, data sources/sinks, services

• /randori:s3-decompose

  PASTA Stage 3: Application decomposition — DFD, trust boundaries, entry points, access control matrix

• /randori:s4-threats

  PASTA Stage 4: Threat analysis — STRIDE classification, ATT&CK mapping, probabilistic assessment, attack tree drafts

• /randori:s5-vulns

  PASTA Stage 5: Vulnerability analysis — CVE/CWE correlation, weak patterns, use/abuse case mapping (Pro)

• /randori:s6-attacks

  PASTA Stage 6: Attack modeling — full attack trees, attack surface analysis, simulation results (Pro)

• /randori:s7-risk

  PASTA Stage 7: Risk management — residual risk analysis, mitigation strategies, prioritized recommendations (Pro)

• /randori:threat-report

  Generate a threat model report from completed PASTA stages

Subagents (4)

• attack-modeler

  Use this agent when building attack trees, analyzing attack surfaces, or modeling multi-step attack paths. Triggered by PASTA Stage 4 (attack tree drafts) and Stage 6 (full attack modeling). Also triggered when user asks about "attack trees", "attack paths", "attack surface", "kill chain", or "multi

• risk-assessor

  Use this agent when assessing risk levels, prioritizing threats, or producing risk management recommendations. Triggered by PASTA Stage 7 (risk management) and when user asks about "risk assessment", "risk prioritization", "mitigation priorities", "residual risk", or "risk treatment". - Glob - Grep

• threat-analyst

  Use this agent when identifying and classifying threats using STRIDE methodology with MITRE ATT&CK mapping. Triggered by PASTA Stage 4 (threat analysis), or when user asks about "threat identification", "STRIDE analysis", "what threats exist", "ATT&CK mapping", or "threat scenarios". - Glob - Grep -

• vuln-correlator

  Use this agent when correlating threats to known vulnerabilities (CVE/CWE), checking dependencies for known issues, or mapping threat scenarios to vulnerability databases. Triggered by PASTA Stage 5 (vulnerability analysis) and when user asks about "CVE lookup", "vulnerability correlation", "known v

Similar plugins