Threat modeling and AI-reasoning vulnerability detection harness for Claude Code — STRIDE + AI + MAESTRO
This repository also configures its own agents. See what tachi tells them →
Agent Claude Code needs its repo
Detects threats from autonomous agent systems operating with insufficient constraints on decision-making, action scope, or operational boundaries, including excessive autonomy, goal misalignment, and cascading multi-agent failures.
Agent Claude Code needs its repo
Detects threats where attackers manipulate training data, RAG indexes, knowledge bases, or fine-tuning pipelines to corrupt LLM behavior at the source.
Agent Claude Code needs its repo
STRIDE denial of service threat agent that detects availability degradation threats against Processes, Data Stores, and Data Flows, covering resource exhaustion, algorithmic complexity attacks, connection pool exhaustion, and cascading dependency failures.
Agent Claude Code needs its repo
STRIDE information disclosure threat agent that detects confidentiality violations against Processes, Data Stores, and Data Flows, covering error message exposure, excessive data in responses, data at rest and in transit exposure, and side-channel leakage.
Agent Claude Code needs its repo
Detects threats where attackers attempt to steal, replicate, or extract proprietary model assets through weight exfiltration, API-based extraction, artifact exposure, side-channel attacks, and supply chain compromise.
Agent Claude Code needs its repo
STRIDE elevation of privilege threat agent that detects unauthorized privilege gain against Processes, covering broken access control, insecure direct object references, role escalation, multi-tenancy boundary violations, and lateral movement.
Agent Claude Code needs its repo
Detects prompt injection vulnerabilities in LLM-integrated components, including direct injection, indirect injection via RAG pipelines, jailbreaking, system prompt extraction, and cross-plugin injection attacks.
Agent Claude Code needs its repo
STRIDE repudiation threat agent that detects accountability failures against External Entities and Processes, covering missing audit trails, insufficient log detail, log tampering vulnerabilities, and timestamp manipulation.
Agent Claude Code needs its repo
Quantitative risk scoring agent that enriches threat model findings with four-dimensional scores (CVSS 3.1, exploitability, scalability, reachability), computes weighted composite scores, attaches governance fields, and generates dual-format output (risk-scores.md and risk-scores.sarif).
Agent Claude Code needs its repo
STRIDE spoofing threat agent that detects identity impersonation threats against External Entities and Processes, covering authentication bypass, credential theft, session hijacking, and federated identity attacks.
Agent Claude Code needs its repo
STRIDE tampering threat agent that detects unauthorized data modification threats against Processes, Data Stores, and Data Flows, covering input injection, data flow manipulation, persistent data corruption, and supply chain attacks.
Agent Claude Code needs its repo
Transforms structured threat model output into visual infographic specifications and images via Gemini API. Supports multiple templates: Baseball Card (risk summary dashboard) and System Architecture (annotated architecture diagram with attack surface badges).
Agent Claude Code needs its repo
Transforms structured threat model output into a narrative threat report with executive summary, Mermaid attack trees for Critical and High findings, prioritized remediation roadmap with effort estimates, and complete finding traceability.
Agent Claude Code needs its repo
Detects threats from agentic systems invoking external tools, MCP servers, plugins, or APIs, including unauthorized tool invocation, capability escalation through tool composition, parameter injection, and tool poisoning attacks.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: