threat-modeling plugins

by OpenAI

Codex Security workflows for security scans, analysis, and investigation.

by Jeremy Longshore

Professional security tools for Claude Code: vulnerability scanning, compliance, cryptography audit, container & API security

by Jeremy Longshore

Professional security tools for Claude Code: vulnerability scanning, compliance, cryptography audit, container & API security

by Jeremy Longshore

Professional security tools for Claude Code: vulnerability scanning, compliance, cryptography audit, container & API security

by Application Security Team

Code-derived threat modeling plugin: the architecture model is derived from the repository, not maintained by hand. Provides AppSec-focused agents and skills for threat modeling, STRIDE analysis, dependency scanning, QA review, and security context resolution.

by Matt Corbett

Security-engineering (AppSec) team — agents (appsec-engineer, threat-modeler, supply-chain-security-engineer, cloud-security-engineer) for building security INTO software: threat modeling (STRIDE, data-flow diagrams, trust boundaries), application security testing (SAST/DAST/IAST/SCA in CI, OWASP Top 10 web), secrets management (detection, rotation, vaulting, no plaintext), software supply-chain integrity (SBOM consumption, dependency CVEs, SLSA verification, pinning), and cloud security posture (CSPM, IAM least-privilege, network exposure). skills, a decision-tree knowledge bank (vuln-triage + secrets-handling trees + a dated 2026 tooling map), best-practices, templates, commands, an advisory hook. **Proposes controls; every ship/no-ship security VERDICT escalates to ravenclaude-core/security-reviewer.** Seams: API OWASP -> api-engineering, identity -> auth-identity, data privacy -> data-governance-privacy. Requires ravenclaude-core@>=0.7.0.

by OpenAI

Codex Security workflows for security scans, analysis, and investigation.