claude

threat-modeling

STRIDE / PASTA threat modeling, data flow diagrams, attack trees, and risk-ranked mitigations.

11 on GitHubby Jassicsv0.2.0GPL-3.0updated 3 months agodomain
/

Plugin threat-modeling from marketplace awesome-claude-security in jassics/awesome-claude-security. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (4)

  • maestro

    Run a MAESTRO threat model — the Cloud Security Alliance's layered framework for multi-agent / agentic AI systems — enumerating threats at each layer of the agent stack and across agent-to-agent and cross-layer trust boundaries. Use when threat modeling a multi-agent or agentic AI system where agent

  • pasta

    Run the PASTA (Process for Attack Simulation and Threat Analysis) seven-stage, risk-centric threat model that ties technical threats to business impact. Use for a deeper, attacker-simulation threat model where business risk alignment matters (vs. the faster STRIDE pass).

  • risk-rank

    Rank a set of enumerated threats or findings by risk (likelihood × impact) and map each to a prioritized mitigation. Use after STRIDE/PASTA enumeration or any time you have a threat/finding list that needs prioritization.

  • stride

    Run a STRIDE threat model over a system: build/ingest a DFD, then enumerate Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege threats per element and trust-boundary crossing, with mitigations. Use when threat modeling an application, service, or

View source on GitHub jassics.github.io

More from jassics/awesome-claude-security

All 45 plugins →

ai-safety

claude

AI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance.

6 skills · 1 agent

11

agentic-ai-security

claude

Security for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency.

6 skills

11

ciso-toolkit

claude

CISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling.

3 skills · 1 command · 1 agent

11

grc

claude

Governance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming.

3 skills · 1 command · 1 agent

11

security-architect

claude

Security architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack.

3 skills · 1 command · 1 agent

11

security-diagramming

claude

Attack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based).

5 skills

11

Similar plugins

mattpocock-skills

claude

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

ruflo-metaharness

claude

MetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint

13 skills · 1 command · 1 agent · hooks

ruvnet/ruflo 81,589

agentic-bundle-architecture-design

claudecodex

Install the "Architecture & Domain Modeling" editorial skill bundle for Claude Code.

13 skills

sickn33/agentic-awesome-skills 49,620

cockroachdb

claude

Connect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.

34 skills · 3 agents · 3 MCP servers · hooks

anthropics/claude-plugins-official 47,076

Hostinger

claude

Deploy, manage and monitor Hostinger services — Websites, Domains, Ecommerce, Email Marketing, Subscriptions & Payments, and VPS. Authenticate via browser (OAuth) or API token.

7 skills · 1 MCP server

anthropics/knowledge-work-plugins 35,601

c-level-agents

claude

Founder-mode executive team plugin: 13 cs-* C-suite agents (CFO, CMO, CRO, CPO, COO, CHRO, CISO, Chief of Staff, General Counsel, Chief Data Officer, Chief AI Officer, Chief Customer Officer, VP of Engineering) with distinct cognitive voices, plus 21 /c-level-agents:* slash commands — forcing-question office hours (CFO/CMO/CPO/CRO/CTO/CISO/GC/CDO/CAIO/CCO/VPE reviews), strategic sprint pipeline (brief → boardroom → decide → execute → post-mortem), and meta routing (/c-level-agents:founder-mode auto-router, /cs-onboard, /c-level-agents:cross-eval multi-model consensus, /c-level-agents:freeze cooldown lock). Wraps the 33 c-level skills with cognitive gearing, persona voice, and artifact-driven handoffs. The business-domain answer to YC Garry Tan's gstack.

22 skills · 13 agents

alirezarezvani/claude-skills 29,725

Maintain threat-modeling?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins45 plugins