yogsoth-ai Structured Attack Campaign Tactic
Complete attack lifecycle from surface enumeration through probing to aggregated findings.
Orchestration
- threat-surface-mapping enumerates all attackable surfaces of the artifact
- attack-vector-generation produces prioritized attack vectors per surface
- probe-execution executes each vector, records outcome (success/failure/partial)
- Partial successes trigger follow-up vector generation (depth-first on promising attacks)
- finding-aggregation deduplicates, classifies, and ranks all findings
- attack-resilience-scoring computes coverage metrics and overall resilience score
Subagents Dispatched
- threat-surface-mapping (1 call at start)
- attack-vector-generation (1 call per surface)
- probe-execution (1 call per vector, budget-limited)
- finding-aggregation (1 call at end)
- attack-resilience-scoring (1 call at end)
Termination Conditions
- All budgeted attack vectors exhausted
- All surfaces probed to at least depth 1
- Critical vulnerability found (early termination with immediate report)
- Diminishing returns: 3 consecutive probes yield no new findings
Available SOPs
Optional, no fixed order; the final leaf is always a sop.
| SOP | When to use |
|---|---|
| attack-resilience-scoring | Compute overall resilience score (0.0-1.0) based on attack results, coverage, and vulnerability severity distribution. |
| attack-vector-generation | Generate specific attack strategies for a given threat surface, producing concrete probes that can be executed. |
| finding-aggregation | Aggregate, deduplicate, and classify findings from multiple probes into a coherent vulnerability report. |
| probe-execution | Execute a single attack probe against an artifact, record the result with evidence and severity classification. |
| threat-surface-mapping | Enumerate all attackable surfaces of an artifact — logical, empirical, methodological, social, and practical dimensions. |