threat-model

A Claude Code plugin that reads Open Threat Model (OTM) files committed to a repository and lands threats into Noru's risk register, linked to organizational controls and flagging undeclared components found by other scanning tools. It keeps threat models synchronized with live code by proposing one risk per threat per element, handling expiry based on model observation dates, and providing read-only scan and diff commands before write-enabled push to Noru's API.