0126-attack-tree-construction

What problem does it solve?

Attack trees make it hard to consistently visualize how threats unfold and where defenses break, especially when multiple attacker steps and dependencies are involved.

Core Features & Use Cases

• Structured attack modeling: Define goals, sub-goals, OR/AND relationships, and leaf attack steps to represent complete attacker paths.
• Risk-focused attributes: Annotate each leaf with difficulty, cost, time, and detection risk to support security prioritization.
• Path and coverage analysis: Enumerate all possible attack paths, compute path metrics, and estimate how mitigations reduce open paths.
• Communication-ready outputs: Use exporters (e.g., Mermaid/PlantUML) and JSON serialization to share threat models with stakeholders.

Quick Start

Use the attack-tree-construction skill to design an OR/AND attack tree for a chosen threat scenario and then generate prioritized mitigation recommendations based on path coverage impact.