Agent Claude Code needs its repo
Detects threats from autonomous agent systems operating with insufficient constraints on decision-making, action scope, or operational boundaries, including excessive autonomy, goal misalignment, and cascading multi-agent failures.
Agent Claude Code needs its repo
Detects threats where attackers manipulate training data, RAG indexes, knowledge bases, or fine-tuning pipelines to corrupt LLM behavior at the source.
Agent Claude Code needs its repo
STRIDE denial of service threat agent that detects availability degradation threats against Processes, Data Stores, and Data Flows, covering resource exhaustion, algorithmic complexity attacks, connection pool exhaustion, and cascading dependency failures.
Agent Claude Code needs its repo
STRIDE information disclosure threat agent that detects confidentiality violations against Processes, Data Stores, and Data Flows, covering error message exposure, excessive data in responses, data at rest and in transit exposure, and side-channel leakage.
Agent Claude Code needs its repo
Detects threats where attackers attempt to steal, replicate, or extract proprietary model assets through weight exfiltration, API-based extraction, artifact exposure, side-channel attacks, and supply chain compromise.
Agent Claude Code needs its repo
STRIDE elevation of privilege threat agent that detects unauthorized privilege gain against Processes, covering broken access control, insecure direct object references, role escalation, multi-tenancy boundary violations, and lateral movement.
Agent Claude Code needs its repo
Detects prompt injection vulnerabilities in LLM-integrated components, including direct injection, indirect injection via RAG pipelines, jailbreaking, system prompt extraction, and cross-plugin injection attacks.
Agent Claude Code needs its repo
STRIDE repudiation threat agent that detects accountability failures against External Entities and Processes, covering missing audit trails, insufficient log detail, log tampering vulnerabilities, and timestamp manipulation.
Agent Claude Code needs its repo
Quantitative risk scoring agent that enriches threat model findings with four-dimensional scores (CVSS 3.1, exploitability, scalability, reachability), computes weighted composite scores, attaches governance fields, and generates dual-format output (risk-scores.md and risk-scores.sarif).
Agent Claude Code needs its repo
STRIDE spoofing threat agent that detects identity impersonation threats against External Entities and Processes, covering authentication bypass, credential theft, session hijacking, and federated identity attacks.
Agent Claude Code needs its repo
STRIDE tampering threat agent that detects unauthorized data modification threats against Processes, Data Stores, and Data Flows, covering input injection, data flow manipulation, persistent data corruption, and supply chain attacks.
Agent Claude Code needs its repo
Transforms structured threat model output into visual infographic specifications and images via Gemini API. Supports multiple templates: Baseball Card (risk summary dashboard) and System Architecture (annotated architecture diagram with attack surface badges).
Agent Claude Code needs its repo
Transforms structured threat model output into a narrative threat report with executive summary, Mermaid attack trees for Critical and High findings, prioritized remediation roadmap with effort estimates, and complete finding traceability.
Agent Claude Code needs its repo
Detects threats from agentic systems invoking external tools, MCP servers, plugins, or APIs, including unauthorized tool invocation, capability escalation through tool composition, parameter injection, and tool poisoning attacks.
Cursor rule Cursor needs its repo
AI agent autonomy threat agent — detects excessive autonomy, goal misalignment, unconstrained action scope, missing human-in-the-loop checkpoints, cascading multi-agent failures, and autonomous resource consumption against Processes.
Cursor rule Cursor needs its repo
AI/LLM data poisoning threat agent — detects training data manipulation, RAG index poisoning, knowledge base corruption, fine-tuning supply chain attacks, and context window contamination against Data Stores and Data Flows.
Cursor rule Cursor needs its repo
STRIDE denial of service threat agent — detects availability degradation threats including resource exhaustion, algorithmic complexity attacks, connection pool exhaustion, cascading dependency failures, and application-layer flooding against Processes, Data Stores, and Data Flows.
Cursor rule Cursor needs its repo
STRIDE information disclosure threat agent — detects confidentiality violations including error message exposure, excessive data in responses, data at rest and in transit exposure, side-channel leakage, and debug endpoint exposure against Processes, Data Stores, and Data Flows.
Cursor rule Cursor needs its repo
AI/LLM model theft threat agent — detects model weight exfiltration, API-based model extraction, artifact exposure, side-channel reconstruction, fine-tuned model theft, and supply chain compromise against Data Stores and Processes.
Cursor rule Cursor needs its repo
Central coordinator for tachi OWASP threat modeling — parses architecture input, coordinates STRIDE and AI threat analysis, produces threats.md, SARIF output, and narrative threat report.
Cursor rule Cursor needs its repo
STRIDE elevation of privilege threat agent — detects unauthorized privilege gain including broken access control, insecure direct object references, role escalation, multi-tenancy boundary violations, and lateral movement against Processes.
Cursor rule Cursor needs its repo
AI/LLM prompt injection threat agent — detects direct and indirect prompt injection, jailbreak, system prompt extraction, and cross-plugin injection threats against LLM-integrated Processes.
Cursor rule Cursor needs its repo
STRIDE repudiation threat agent — detects accountability failures including missing audit trails, insufficient log detail, log tampering vulnerabilities, timestamp manipulation, and deniable actions against External Entities and Processes.
Cursor rule Cursor needs its repo
STRIDE spoofing threat agent — detects identity impersonation, authentication bypass, credential theft, session hijacking, and federated identity attacks against External Entities and Processes.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: