security-scanning

Plugin security-scanning from marketplace claude-code-workflows in wshobson/agents. Commands read from the repo's manifest — 4 days ago.

Skills (5)

• attack-tree-construction

  Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

• sast-configuration

  Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.

• security-requirement-extraction

  Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

• stride-analysis-patterns

  Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

• threat-mitigation-mapping

  Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.

Slash commands (3)

• /security-scanning:security-dependencies

  Scan dependencies for vulnerabilities and generate supply chain security evidence

• /security-scanning:security-hardening

  Orchestrate comprehensive security hardening with defense-in-depth strategy across all application layers

• /security-scanning:security-sast

  Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks

Subagents (2)

• security-scanning-security-auditor

  Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR

• threat-modeling-expert

  Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems.

Similar plugins