threat-modeling

SSiertsema/claude-code-plugins

STRIDE (default) or PASTA threat modeling. Decomposes system, identifies trust boundaries, enumerates threats per element systematically (Spoofing / Tampering / Repudiation / Information-disclosure / DoS / Elevation-of-privilege), scores likelihood × impact, maps to mitigations. Optional attack trees. Residual risk accounting. Mermaid diagrams with optional PNG export.

GitHub stars

1

Sponsors

SnugThe clipboard manager you and your agent can use, safelyAgent CaffeineClose your lid, come back to finished workWaxBlock anything with supervision, without erasing your iPhoneOpen StepsSponsoredFree and open-source skills that make AI coding agents easier to understand, verify, and control.