attack-path-simulator

Simulate attacker paths and generate kill chain reports from security reviews.

Updated May 20, 2026
One-click install
npx skills add https://github.com/Jayarr03/Codex_ThreatModel_Skills --skill attack-path-simulator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: attack-path-simulator
Source: https://github.com/Jayarr03/Codex_ThreatModel_Skills/tree/main/skills/attack-path-simulator
Command: npx skills add https://github.com/Jayarr03/Codex_ThreatModel_Skills --skill attack-path-simulator

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps in simulating plausible attacker paths through a repository, architecture, or local folder, providing an attacker-centered narrative and kill-chain report.

Core Features & Use Cases

  • Attack Path Simulation: Coordinates multiple security review skills to simulate attacker paths.
  • Kill Chain Analysis: Produces a grounded kill chain report detailing attacker actions, weaknesses, and impacts.
  • Use Case: When reviewing a repository, use this skill to understand how an attacker might compromise a system from entry to impact.

Quick Start

Use the attack-path-simulator skill to simulate an attack path through the 'example-repo' repository.

Frequently Asked Questions about attack-path-simulator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I simulate attacker paths through a repository or local folder?

Simulating attacker paths requires orchestrating multiple security review skills to map a plausible kill chain through your system. This process produces a detailed report outlining attacker actions, discovered weaknesses, and potential impacts from entry to compromise.

What is attack path simulation and how does it map to MITRE ATT&CK?

Attack path simulation models an attacker's progression from initial entry to final impact by orchestrating threat modeling and vulnerability review. It maps the kill chain against frameworks like MITRE ATT&CK to identify specific weaknesses and defensive coverage gaps.

Can I generate a kill chain report for my architecture without manual threat modeling?

Generating a kill chain report requires coordinating threat modeling, STRIDE, and attack tree analysis skills to simulate the path automatically. You provide the repository or architecture, and the simulation orchestrates these reviews to produce a grounded attacker-centered narrative.

Does attack path simulation work with STRIDE and defensive coverage analysis?

Yes, attack path simulation coordinates directly with STRIDE, defensive coverage, and MITRE ATT&CK analysis to map attacker actions. By orchestrating these security review skills, it identifies gaps in defensive coverage and highlights weaknesses within the simulated kill chain.

What is the best way to analyze security weaknesses from an attacker's perspective?

The best way to analyze security weaknesses from an attacker's perspective is running an attack path simulation. It orchestrates vulnerability reviews and attack tree analysis to produce a kill chain report, detailing how an attacker could compromise the system.

What limitations exist when simulating an attack path through a local folder?

The primary limitation is its dependency on coordinating multiple underlying security review skills to function correctly. If threat modeling, vulnerability review, or attack tree analysis skills lack sufficient context about your local folder, the kill chain report will lack accuracy and depth.