threat-modeling

This Claude Code plugin runs automated STRIDE threat modeling on features or designs, enumerating assets, trust boundaries, and threats across all six STRIDE categories (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege) with concrete mitigations. It activates automatically when you mention threat modeling, security design reviews, or STRIDE concepts, and includes a read-only threat-modeler subagent that produces verbose threat models in an isolated context.