RedHatProductSecurity

RedHatProductSecurity/prodsec-skills

Plugin Claude Code

Lists 2 plugins

Plugin marketplace listing 2 plugins: prodsec-skills, prodsec-skills-ge-core.

RedHatProductSecurity/osidb

Cursor rule Cursor

How to run tests in the OSIDB project.

RedHatProductSecurity/agentic-threat-modeling

Command Claude Code

Share feedback on a generated threat model by filing a GitHub issue.

RedHatProductSecurity/agentic-threat-modeling

Command Claude Code

Quick non-interactive threat assessment using STRIDE. Scans the current repo and produces a full threat model without asking questions.

RedHatProductSecurity/agentic-threat-modeling

Command Claude Code

Review an existing THREATMODEL.md against the current code state. Identifies drift, stale threats, and new attack surface.

RedHatProductSecurity/agentic-threat-modeling

Command Claude Code

Generate a threat model for the current project or a specific target. Supports multiple frameworks and threat actor perspectives.

RedHatProductSecurity/agentic-threat-modeling

Skill Claude Code

Core threat analysis engine. Takes a system context profile and applies one or more threat modeling frameworks (STRIDE, PASTA, LINDDUN, VAST, Attack Trees, OCTAVE) with automatic threat actor profiling.

RedHatProductSecurity/agentic-threat-modeling

Skill Claude Code

Discovers system context for threat modeling through code analysis and/or user interview. Produces a structured system profile covering components, data flows, trust boundaries, assets, and entry points.

RedHatProductSecurity/agentic-threat-modeling

Skill Claude Code

Generates the final threat model deliverable. Produces a narrative THREATMODEL.md report.

RedHatProductSecurity/agentic-threat-modeling

Skill Claude Code

Reviews an existing THREATMODEL.md against the current codebase. Identifies stale threats, new attack surface, drift from assumptions, and unimplemented mitigations.

RedHatProductSecurity/agentic-threat-modeling

Skill Claude Code

Main dispatcher for threat modeling. Routes to discover, analyze, and report sub-skills based on user intent. Supports multiple frameworks (STRIDE, PASTA, LINDDUN, VAST, Attack Trees, OCTAVE) and automatic threat actor profiling.