attack-tree-construction

This skill facilitates the systematic visualization and analysis of potential attack paths against a system or organization. By building comprehensive attack trees, security professionals can map out complex attack scenarios, pinpoint vulnerabilities in their defenses, and prioritize mitigation efforts.

The skill helps in effectively communicating security risks to stakeholders, enabling informed decision-making regarding security investments and testing strategies. It leverages a structured approach to decompose attack goals into sub-goals, allowing for a detailed assessment of costs, skills, time, and detectability associated with each path.

What It Does

This skill constructs attack trees to visualize threat paths, identify defense gaps, and prioritize security risks.

When To Use

Use this skill when visualizing complex attack scenarios, identifying defense gaps and priorities, communicating risks to stakeholders, and planning defensive investments or test scopes.

Installation

Copy SKILL.md to your skills directory