claudecodex

Security Risk Review

Produces a STRIDE threat model, flagging the risks teams commonly miss.

7 on GitHubby O'Reilly Mediav0.3.0Apache-2.0updated 20 days agosecurity
/

Plugin evaluate-security-risk from marketplace expert-intelligence-skills in oreillymedia/expert-intelligence-skills. Commands read from the repo's manifest — 19 days ago.

What it installs

Skills (1)

  • evaluate-security-risk

    Creates a structured defensive threat model for a proposed, changing, or existing service using cited O'Reilly security sources. Use when the primary task is identifying assets, data flows, trust boundaries, threats, prioritized mitigations, or STRIDE coverage for authentication, tokens, APIs, uploa

MCP servers (1)

  • oreilly-expert-intelligence

    connects to: https://api.oreilly.com/api/expert/v1/mcp

View source on GitHub learning.oreilly.com

More from oreillymedia/expert-intelligence-skills

All 13 plugins →

A cited expert research toolkit for engineering decisions, delivery, reliability, security, and team growth.

12 skills · 1 MCP server

7

Team Assessment

claudecodex

Diagnoses team structure problems against expert org-design frameworks.

1 skill · 1 MCP server

7

Compares implementation approaches with cited trade-offs and a code example.

1 skill · 1 MCP server

7

Decision Brief

claudecodex

Turns a "should we?" into a memo-ready recommendation grounded in expert consensus.

1 skill · 1 MCP server

7

Learning Plan

claudecodex

Sequences expert content into a learning path for a career transition.

1 skill · 1 MCP server

7

Pressure-tests a plan into realistic timelines and delivery risks.

1 skill · 1 MCP server

7

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain Security Risk Review?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins13 plugins