f153f969a0
Add /ultraresearch-local for structured research combining local codebase analysis with external knowledge via parallel agent swarms. Produces research briefs with triangulation, confidence ratings, and source quality assessment. New command: /ultraresearch-local with modes --quick, --local, --external, --fg. New agents: research-orchestrator (opus), docs-researcher, community-researcher, security-researcher, contrarian-researcher, gemini-bridge (all sonnet). New template: research-brief-template.md. Integration: --research flag in /ultraplan-local accepts pre-built research briefs (up to 3), enriches the interview and exploration phases. Planning orchestrator cross-references brief findings during synthesis. Design principle: Context Engineering — right information to right agent at right time. Research briefs are structured artifacts in the pipeline: ultraresearch → brief → ultraplan --research → plan → ultraexecute. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1.1 KiB
1.1 KiB
| name | description | allowed-tools | model |
|---|---|---|---|
| security:threat-model | Interactive threat modeling using STRIDE and MAESTRO frameworks — guides architecture analysis and generates threat model document | Read, Glob, Grep, AskUserQuestion, Agent | sonnet |
/security threat-model
Interactive threat modeling — STRIDE x MAESTRO, 5-phase interview, complete threat model document.
Run Session
Spawn subagent_type: "llm-security:threat-modeler-agent", model: "opus":
Run the full 5-phase interactive threat modeling session. Read these knowledge files (absolute paths):
- <plugin-root>/knowledge/skill-threat-patterns.md
- <plugin-root>/knowledge/mcp-threat-patterns.md Follow your interview workflow: Architecture Discovery → Component Mapping → Threat Identification (STRIDE x MAESTRO) → Risk Assessment → Mitigation Mapping. Output the complete threat model document directly to the conversation.
After Session
- To save: ask user if they want it written to
threat-model.md - To verify mitigations:
/security posture - For production readiness:
/security pre-deploy