By oplane
AI-powered security analysis — threat modeling, implementation assessment, and PR security review
AI-powered security analysis for your codebase — threat modeling, implementation assessment, and PR security review.
Works with both Claude Code and Cursor.
This plugin connects your IDE to Oplane, giving you:
Results are saved to Oplane and visible in the Gravity web interface.
claude --plugin-dir /path/to/oplane-plugin
Install from the Cursor Marketplace (when available), or load via Cursor Settings > Plugins and add the repository URL.
After installing the plugin, authenticate with Oplane:
/mcpIf you prefer using a Personal Access Token:
claude mcp add --transport http \
--header "Authorization: Bearer YOUR_PAT_TOKEN" \
oplane https://gravity.oplane.io/mcp/
To point at a different Oplane server, set the OPLANE_BASE_URL environment variable:
export OPLANE_BASE_URL=https://your-oplane-instance.com
/oplane:analyze
Performs a full security threat model analysis. Optionally focus on a specific area:
/oplane:analyze authentication and session management
/oplane:analyze-pr
Analyzes the current PR changes for security implications. Provide context:
/oplane:analyze-pr PR #123 adds OAuth login flow
The plugin also provides a security-agent subagent that Claude Code can invoke automatically when security analysis is needed.
The plugin provides access to these Oplane MCP tools:
| Tool | Description |
|---|---|
new_threatmodel | Create threat models with security requirements |
request_implementation_advice | Get implementation guidance (supports batch) |
update_implementation_state | Record implementation assessments |
update_requirement_severity | Adjust severity with motivation |
my_recent_threatmodels | List your own recent threat models |
add_threatmodel_comment | Add context to refine threat models |
Proprietary. See Oplane for terms.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub oplane/oplane-plugin --plugin oplaneSecurity skills for vibe coding — pre-coding security assessment, code vulnerability review, and threat modeling. Works without any MCP server or Jira/Confluence setup.
Security analysis agent for vulnerability assessment and threat modeling
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.
Agents specialized in security engineering and threat mitigation. Focuses on secure architecture, vulnerability assessment, and compliance.
AI-powered cybersecurity code review with 8 specialist agents, OWASP Top 10:2021, CWE Top 25:2024, MITRE ATT&CK v15, and framework-aware false-positive suppression
Comprehensive security plugin: OWASP Top 10, authentication patterns, cryptography, API security, secrets management, supply chain security, DevSecOps, container security, zero trust, and threat modeling.