agent-security-hardening
AFaffaan-m/ECC278k4,046 new stars in the last 7 days
attack-tree-construction
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
- Star
- 1,750
- Category
- Security
- License
- MIT
- Last commit
- Oct 1, 2026
skills/attack-tree-construction/SKILL.md
View on GitHubAttack Tree Construction
Systematic attack path visualization and analysis.
Use this skill when
- Visualizing complex attack scenarios
- Identifying defense gaps and priorities
- Communicating risks to stakeholders
- Planning defensive investments or test scopes
Do not use this skill when
- You lack authorization or a defined scope to model the system
- The task is a general risk review without attack-path modeling
- The request is unrelated to security assessment or design
Instructions
- Confirm scope, assets, and the attacker goal for the root node.
- Decompose into sub-goals with AND/OR structure.
- Annotate leaves with cost, skill, time, and detectability.
- Map mitigations per branch and prioritize high-impact paths.
- If detailed templates are required, open
resources/implementation-playbook.md.
Safety
- Share attack trees only with authorized stakeholders.
- Avoid including sensitive exploit details unless required.
Resources
resources/implementation-playbook.mdfor detailed patterns, templates, and examples.
Similar Skills
ponytail-review
DIDietrichGebert/ponytail162k5,405 new stars in the last 7 days
ponytail-audit
DIDietrichGebert/ponytail162k5,405 new stars in the last 7 days
ponytail-audit
DIDietrichGebert/ponytail162k5,405 new stars in the last 7 days
cso
GAgarrytan/gstack136k883 new stars in the last 7 days
Featured
security-and-hardening
Harden code against the OWASP Top 10: input handling, authentication, sessions and dependencies.
ADaddyosmani/agent-skills106k3,628 new stars in the last 7 days