Systematic attack path visualization and analysis.
Use this skill when
Visualizing complex attack scenarios
Identifying defense gaps and priorities
Communicating risks to stakeholders
Planning defensive investments or test scopes
Do not use this skill when
You lack authorization or a defined scope to model the system
The task is a general risk review without attack-path modeling
The request is unrelated to security assessment or design
Instructions
Confirm scope, assets, and the attacker goal for the root node.
Decompose into sub-goals with AND/OR structure.
Annotate leaves with cost, skill, time, and detectability.
Map mitigations per branch and prioritize high-impact paths.
If detailed templates are required, open resources/implementation-playbook.md.
Safety
Share attack trees only with authorized stakeholders.
Avoid including sensitive exploit details unless required.
Resources
resources/implementation-playbook.md for detailed patterns, templates, and examples.
1---2name: attack-tree-construction3description: Attack Tree Construction4---5# Attack Tree Construction67Systematic attack path visualization and analysis.89## Use this skill when1011- Visualizing complex attack scenarios12- Identifying defense gaps and priorities13- Communicating risks to stakeholders14- Planning defensive investments or test scopes1516## Do not use this skill when1718- You lack authorization or a defined scope to model the system19- The task is a general risk review without attack-path modeling20- The request is unrelated to security assessment or design2122## Instructions2324- Confirm scope, assets, and the attacker goal for the root node.25- Decompose into sub-goals with AND/OR structure.26- Annotate leaves with cost, skill, time, and detectability.27- Map mitigations per branch and prioritize high-impact paths.28- If detailed templates are required, open `resources/implementation-playbook.md`.2930## Safety3132- Share attack trees only with authorized stakeholders.33- Avoid including sensitive exploit details unless required.3435## Resources3637- `resources/implementation-playbook.md` for detailed patterns, templates, and examples.
Run npx skillmds@latest add comeonoliver/attack-tree-construction in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Attack Tree Construction It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
ComeOnOliver (@comeonoliver) published this skill. Their other Agent Skills are listed on their SkillMD profile.
ComeOnOliver