Threat Model
Evidence-backed threat modeling and patch remediation for codebases.
- Type
- Plugin
- Repository
- pproenca/dot-skills
- GitHub stars
- 211
- License
- MIT
- Repo last updated
- Aug 15, 2026
- Source file
- plugins/threat-model/.codex-plugin/plugin.json
- Version
- 0.1.0
- Author
- pproenca
What Threat Model is
Threat Model is a plugin published in the pproenca/dot-skills repository on GitHub, which has about 211 stars. The repository describes itself as: “A collection of AI agent skills following the Agent Skills open format”
A plugin is a package that bundles skills, slash commands, subagents, hooks, and MCP connectors so they install together. Plugins are plain files with a manifest at .claude-plugin/plugin.json, and they work in both Claude Code and Claude Cowork.
Installing Threat Model adds everything it ships in one step. Connectors inside a plugin still need to be connected separately, and hooks and subagents only run in Cowork and Claude Code, not in regular chat.
How to install Threat Model
Claude Code
- Add the repository as a plugin marketplace: claude plugin marketplace add pproenca/dot-skills
- Install the plugin: claude plugin install threat-model@<marketplace-name>, using the marketplace name from the repository's .claude-plugin/marketplace.json.
- Restart the session if the new skills or commands don't appear straight away.
Claude Cowork
- Open Customize → Plugins and choose Add marketplace.
- Enter pproenca/dot-skills (the owner/repo shorthand works for GitHub).
- Find Threat Model in the list, click Install, then connect any connectors it needs from its Connectors tab.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
We couldn't retrieve the source file for this entry. Browse the repository on GitHub to find it and read the README before installing.
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Threat Model?
Threat Model is a plugin for Claude Code and Claude Cowork from the pproenca/dot-skills repository on GitHub. Evidence-backed threat modeling and patch remediation for codebases.
How do I install Threat Model in Claude Code?
Add the repository as a plugin marketplace: claude plugin marketplace add pproenca/dot-skills Install the plugin: claude plugin install threat-model@<marketplace-name>, using the marketplace name from the repository's .claude-plugin/marketplace.json. Restart the session if the new skills or commands don't appear straight away.
Can I use Threat Model in Claude Cowork?
Open Customize → Plugins and choose Add marketplace. Enter pproenca/dot-skills (the owner/repo shorthand works for GitHub). Find Threat Model in the list, click Install, then connect any connectors it needs from its Connectors tab.
Is Threat Model safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- 12 Factor App The Twelve-Factor App methodology for building scalable, maintainable cloud-native applications. Use when designing backend services… Skill · pproenca/dot-skills
- dot-skills — Validator-First Definition of Done Frames a markdown-authoring repo as red-green-refactor with the validator as the test gate, and gives an explicit 'Definition of Done —… CLAUDE.md Example · pproenca/dot-skills
- Woz WOZCODE enhanced coding tools — smart search, batch editing, SQL introspection, and cost-optimized subagent delegation Plugin · WithWoz/wozcode-plugin
- Cc Fleet Run any model with an Anthropic- or OpenAI-compatible API (e.g. DeepSeek, GLM, Kimi, Qwen, MiniMax) — even your Codex subscription — as real Claude Code workflows, agent-team teammates, or one-shot subagents, driven exactly like native ones. Your main session's own auth is untouched (OAuth subscription or API key, either works); API-key providers bill the provider key via apiKeyHelper, while a… Plugin · ethanhq/cc-fleet
- Wozcode WOZCODE enhanced coding tools — smart search, batch editing, SQL introspection, and cost-optimized subagent delegation Plugin · WithWoz/wozcode-plugin
- Gitops Skills Skills to transform AI Agents into GitOps Engineers Plugin · fluxcd/agent-skills
- Task Orchestrator Claude Code integration for MCP Task Orchestrator — schema-aware context, note-driven workflow Plugin · jpicklyk/task-orchestrator
- Code Abyss 26 domain skills + 5 verification tools for security-first full-stack engineering. Covers security, architecture, DevOps, AI, mobile, office docs, frontend design, and multi-agent coordination. Plugin · telagod/code-abyss