# attack-tree-construction

> Claude/Codex skill by [@wshobson](https://omgskills.com/library/wshobson/index.md) · 38k stars · Updated 2026-07-22

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

Tags: agent-skills, agentic-ai, agents, ai-agents, anthropic, automation, claude-code, claude-code-plugins, codex-cli, copilot, cursor, cursor-rules, developer-tools, gemini-cli, mcp, multi-agent, opencode, orchestration, prompt-engineering, workflows

## Install

```sh
git clone https://github.com/wshobson/agents /tmp/agents && ln -s /tmp/agents/plugins/security-scanning/skills/attack-tree-construction ~/.claude/skills/attack-tree-construction
```

## From README

Attack Tree Construction Systematic attack path visualization and analysis. When to Use This Skill Visualizing complex attack scenarios Identifying defense gaps and priorities Communicating risks to stakeholders Planning defensive investments Penetration test planning Security architecture review Core Concepts Attack Tree Structure Node Types | Type | Symbol | Description | | -------- | --------- | ----------------------- | | OR | Oval | Any child achieves goal | | AND | Rectangle | All children required | | Leaf | Box | Atomic attack step | Attack Attributes | Attribute | Description | Values | | ------------- | ----------------------- | ------------------ | | Cost | Resources needed | $, $$, $$$ | | Time | Duration to execute | Hours, Days, Weeks | | Skill | Expertise required | Low, Medium, High | | Detection | Likelihood of detection | Low, Medium, High | Templates and detailed worked examples Full template library lives in references/details.md.

## Links

- HTML page: https://omgskills.com/library/wshobson/agents/attack-tree-construction/
- GitHub: https://github.com/wshobson/agents
- Author: [@wshobson](https://omgskills.com/library/wshobson/index.md)

## More from this repo

- [api-design-principles](https://omgskills.com/library/wshobson/agents/plugins/backend-development/skills/api-design-principles/index.md) — Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight...
   - [@wshobson](https://omgskills.com/library/wshobson/index.md) · 42k stars
- [angular-migration](https://omgskills.com/library/wshobson/agents/plugins/framework-migration/skills/angular-migration/index.md) — Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates.
   - [@wshobson](https://omgskills.com/library/wshobson/index.md) · 42k stars
- [architecture-decision-records](https://omgskills.com/library/wshobson/agents/architecture-decision-records/index.md) — Used to write and maintain Architecture Decision Records (ADRs) following best practices for technical decision...
   - [@wshobson](https://omgskills.com/library/wshobson/index.md) · 42k stars