attack-SKILL.md

Computes choke-point risk scores from XM Cyber REST API attack path data and generates remediation reports.

Updated Apr 20, 2026
One-click install
npx skills add https://github.com/DCx7C5/ai-marketplace --skill attack-skill-md
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: attack-SKILL.md
Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/vulnerabilities/attack
Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill attack-skill-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, pandas, networkx, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

XM Cyber Attack Path Analysis automates mapping of attack paths and choke points to prioritize remediation for exposures that threaten critical assets.

Core Features & Use Cases

  • Attack path mapping across on-prem, cloud, and hybrid environments.
  • Identification of choke points that block attacker movement.
  • Prioritized remediation guidance with risk scoring and plan generation.
  • Continuous monitoring and integration with existing SOC workflows.

Quick Start

Run the XM Cyber attack path analysis against your XM Cyber instance to generate a prioritized choke point report.

Frequently Asked Questions about attack-SKILL.md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize remediation for attack paths threatening critical assets?

Yes, attack path analysis works across on-prem, cloud, and hybrid environments. It fetches data via the XM Cyber REST API and maps attack graphs to identify exposures threatening critical assets regardless of infrastructure type.

What is a choke point in attack graph analysis?

Choke point identification uses path and asset metrics to compute risk scores within attack graphs. This risk scoring mechanism evaluates which exposures most threaten critical assets to generate prioritized remediation plans.

How do I generate a remediation plan from XM Cyber attack path data?

You need an accessible XM Cyber instance to fetch attack path data via its REST API. The analysis then computes choke-point risk scores using path and asset metrics to produce structured remediation plans.

Can I integrate attack path analysis into existing SOC workflows?

Attack path analysis uses Python libraries including requests, pandas, and networkx. These dependencies support fetching API data, computing risk scores, and modeling attack graphs to identify choke points.

Does attack path analysis work for both cloud and on-prem environments?

Attack path analysis works across on-prem, cloud, and hybrid environments. It fetches data via the XM Cyber REST API and maps attack graphs to identify exposures threatening critical assets regardless of infrastructure type.

What metrics are used for risk prioritization in attack path analysis?

Choke point identification uses path and asset metrics to compute risk scores within attack graphs. This risk scoring mechanism evaluates which exposures most threaten critical assets to generate prioritized remediation plans.