238 maestro(1) - Kailash Tool Reference
238.1 maestro
maestro - MAESTRO threat-modelling CLI — agent-system threat elicitation keyed to the OWASP MAESTRO framework.
| Layer | DEFENCE |
| Category | d-05-threat-modelling |
| Safety class | safe |
| Licence | CC-BY-SA-4.0 |
| Upstream | github.com/agentic-threat-modeling/MAESTRO |
238.1.1 NAME
maestro - MAESTRO threat-modelling CLI — agent-system threat elicitation keyed to the OWASP MAESTRO framework.
238.1.2 SYNOPSIS & usage
Derived from the upstream README at generation time; verify against --help where the tool is installed.
git clone https://github.com/agentic-threat-modeling/MAESTRO.git
cd MAESTRO
# Open in Claude Code, then say:
# "threat model my system"
Phase 1: Business Context Analysis
Phase 2: Architecture Analysis
Phase 3: Threat Actor Analysis
Phase 4: Trust Boundary Analysis
Phase 5: Asset Flow Analysis
Phase 6: Threat Identification
Phase 7: Mitigation Planning
Phase 8: Code Validation Analysis
Phase 9: Residual Risk Analysis
Phase 10: Output Generation and Documentation
238.1.3 DESCRIPTION (upstream)
Version: 1.0.0 | License: CC BY-SA 4.0 A structured, repeatable framework for threat modeling agentic AI and multi-agent systems (MAS), based on the OWASP Multi-Agentic System Threat Modelling Guide v1.0 (April 2025) and the MAESTRO framework from the Cloud Security Alliance. This playbook doubles as an interactive threat modeling agent when opened in Claude Code. The agent walks you through the full 10-phase MAESTRO process, asks targeted questions about your system, and produces structured output files. Quick start: git clone https://github.com/agentic-threat-modeling/MAESTRO.git cd
238.1.4 SEE ALSO
- Category: d-05-threat-modelling in the category directory (sister tools listed there).
ref: pin - verified 2026-10-14