threat-model
A complete, worked threat model for a small checkout service. Use it as a template for shape and depth.
An agent is a specialist Claude hands a whole job to, with its own tools and its own context.
55 agents across 643 plugins.
A complete, worked threat model for a small checkout service. Use it as a template for shape and depth.
Triage is the difference between a security agent and a `grep` wrapper. Raw scanner output is a starting point with a high noise floor; this reference is how…
APIs are forever once published: a consumer you've never met may depend on any field you expose. Design so you can **add without breaking**, and version…
A field guide to the classes you audit most. Each entry: how to spot it, a concrete exploit, and the correct fix. Fixes favor **parameterization, output…
The same PR, summarized two ways. The weak version is what you get from skimming the title and the last commit. The strong version comes from reading the full…
A weighted decision matrix (a.k.a. weighted scoring model, Pugh matrix when scored against a baseline) turns "which option is best?" into an explicit,…
The Summary section is 2-4 sentences that let a reviewer decide where to look *before* they open the diff. It is prose, not a bullet list, and it is a risk…
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic