Stats
Actions
Tags
From mas-design
Apply OWASP MAESTRO, MITRE ATLAS, NIST AI RMF, and ISO 42001/23894 security frameworks to MAS designs
How this skill is triggered — by the user, by Claude, or both
Slash command
/mas-design:securing-masThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
**Target**: $ARGUMENTS
Target: $ARGUMENTS
Trigger this skill when:
MITRE ATLAS (attack taxonomy — what adversaries do)
| informs threat identification
v
OWASP MAESTRO (threat model — what to defend against in MAS)
| maps threats to controls
v
NIST AI RMF (risk framework — how to govern/map/measure/manage)
| operationalized by
v
ISO 42001 + 23894 (certifiable management system + risk methodology)
Use all four layers together: ATLAS enumerates attack vectors, MAESTRO maps them to MAS-specific controls, NIST AI RMF structures governance, and ISO provides the certifiable management system.
Review the framework stack — references/mas-security.md for the conceptual overview of MAESTRO, ATLAS, NIST AI RMF, and ISO 42001/23894 layers working together.
Apply the 7-layer security check — for each new component, walk through every MAESTRO layer. See references/maestro-7-layer-checklist.md for the actionable per-layer checklist (Model → Orchestration).
Run the plugin security checklist — before marking an implementation complete, verify input validation, output safety, resource management, observability, and external dependencies. See references/plugin-security-checklist.md.
Document threats in the cross-framework matrix — for each feature, map concerns to ATLAS techniques, MAESTRO layers, NIST functions, and ISO controls. Start from references/threat-matrix-template.md and add feature-specific rows.
Avoid common vulnerability patterns — consult references/common-vulnerabilities.md for vulnerable/secure code examples: prompt injection (L1), type confusion (L2), resource exhaustion (L5), secret leakage (L6).
Test security controls explicitly — write tests that exercise each MAESTRO layer's controls. See references/security-testing-patterns.md for pytest examples (input validation, timeout enforcement, error message safety).
Provides CDSS development patterns for drug interaction checking, dose validation, clinical scoring (NEWS2, qSOFA), and alert classification integrated into EMR workflows.
npx claudepluginhub qte77/claude-code-plugins --plugin mas-design