attack-tree-construction
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
Install
With your agent
Install OMGSkills skill "wshobson/agents:attack-tree-construction" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/wshobson/agents /tmp/agents && ln -s /tmp/agents/plugins/security-scanning/skills/attack-tree-construction ~/.claude/skills/attack-tree-construction
From README
Attack Tree Construction Systematic attack path visualization and analysis. When to Use This Skill Visualizing complex attack scenarios Identifying defense gaps and priorities Communicating risks to stakeholders Planning defensive investments Penetration test planning Security architecture review Core Concepts Attack Tree Structure Node Types | Type | Symbol | Description | | -------- | --------- | ----------------------- | | OR | Oval | Any child achieves goal | | AND | Rectangle | All children required | | Leaf | Box | Atomic attack step | Attack Attributes | Attribute | Description | Values | | ------------- | ----------------------- | ------------------ | | Cost | Resources needed | $, $$, $$$ | | Time | Duration to execute | Hours, Days, Weeks | | Skill | Expertise required | Low, Medium, High | | Detection | Likelihood of detection | Low, Medium, High | Templates and detailed worked examples Full template library lives in references/details.md.
More from this repo
api-design-principles
Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight...
angular-migration
Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates.
architecture-decision-records
Used to write and maintain Architecture Decision Records (ADRs) following best practices for technical decision...
