mcpField
A
attack-tree-construction

attack-tree-construction

github.com/rmyndharisSecurity1.9k74 installsUpdated 2w ago
Repository

About attack-tree-construction

A security skill for modeling authorized attack paths as structured trees. It helps security teams expose defensive gaps, prioritize mitigations, and communicate risk using AND/OR branches and annotated leaf nodes.

Key features

  1. 01Decompose attacker goals into AND/OR branches
  2. 02Annotate paths with cost, skill, time, and detectability
  3. 03Map mitigations to branches
  4. 04Prioritize high-impact attack paths

Use cases

  1. 01Identify defense gaps in a scoped system
  2. 02Prioritize defensive investments
  3. 03Define security test scope
  4. 04Communicate attack-path risks to stakeholders

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/rmyndharis/antigravity-skills --skill attack-tree-construction

After installing, type/attack-tree-constructionin Claude Code to confirm it loaded.

Bundled filesresources/implementation-playbook.md

Details

From the project README

Attack Tree Construction

Systematic attack path visualization and analysis.

Use this skill when

  • Visualizing complex attack scenarios
  • Identifying defense gaps and priorities
  • Communicating risks to stakeholders
  • Planning defensive investments or test scopes

Do not use this skill when

  • You lack authorization or a defined scope to model the system
  • The task is a general risk review without attack-path modeling
  • The request is unrelated to security assessment or design

Instructions

  • Confirm scope, assets, and the attacker goal for the root node.
  • Decompose into sub-goals with AND/OR structure.
  • Annotate leaves with cost, skill, time, and detectability.
  • Map mitigations per branch and prioritize high-impact paths.
  • If detailed templates are required, open resources/implementation-playbook.md.

Safety

  • Share attack trees only with authorized stakeholders.
  • Avoid including sensitive exploit details unless required.

Resources

  • resources/implementation-playbook.md for detailed patterns, templates, and examples.

Comments

Markdown supported