Skill

attack-tree-construction

Builds attack trees to visualize threat paths, map attack scenarios, identify defense gaps, and communicate security risks to stakeholders.

security

Install

npx claudepluginhub joshuarweaver/cascade-code-general-misc-2 --plugin rmyndharis-antigravity-skills

Tool Access

This skill uses the workspace's default tool permissions.

Preview

Systematic attack path visualization and analysis.

Supporting Assets

resources/implementation-playbook.md

SKILL.md

Similar Skills

using-git-worktrees

Creates isolated Git worktrees for feature branches with prioritized directory selection, gitignore safety checks, auto project setup for Node/Python/Rust/Go, and baseline verification.

superpowers

168.3k

subagent-driven-development

3 files

Executes implementation plans in current session by dispatching fresh subagents per independent task, with two-stage reviews: spec compliance then code quality.

superpowers

168.3k

dispatching-parallel-agents

Dispatches parallel agents to independently tackle 2+ tasks like separate test failures or subsystems without shared state or dependencies.

superpowers

168.3k

Stats

Stars682

Forks124

Last CommitJan 18, 2026

Actions

View Source View Plugin View on GitHub View README

Attack Tree Construction

Systematic attack path visualization and analysis.

Use this skill when

Visualizing complex attack scenarios
Identifying defense gaps and priorities
Communicating risks to stakeholders
Planning defensive investments or test scopes

Do not use this skill when

You lack authorization or a defined scope to model the system
The task is a general risk review without attack-path modeling
The request is unrelated to security assessment or design

Instructions

Confirm scope, assets, and the attacker goal for the root node.
Decompose into sub-goals with AND/OR structure.
Annotate leaves with cost, skill, time, and detectability.
Map mitigations per branch and prioritize high-impact paths.
If detailed templates are required, open resources/implementation-playbook.md.

Safety

Share attack trees only with authorized stakeholders.
Avoid including sensitive exploit details unless required.

Resources

resources/implementation-playbook.md for detailed patterns, templates, and examples.