attack-tree

What problem does it solve?

This Skill helps you to build and visualize attack trees, aiding in threat modeling and security analysis by decomposing complex attack scenarios into actionable steps.

Core Features & Use Cases

• Attack Tree Creation: Build attack trees by defining root goals and decomposing them into sub-goals and leaf attack steps.
• AND/OR Logic: Apply AND and OR logic to represent alternative and necessary paths.
• Risk Analysis: Rank leaf attack steps based on cost, skill required, likelihood, and detectability.
• Visualization: Render attack trees as diagrams using Excalidraw MCP, Mermaid flowchart, or Graphviz DOT.

Quick Start

Create an attack tree for exfiltrating customer data with the following command: `/attack-tree create -g "Exfiltrate Customer PII" -o "steal_database_credentials" -s "exploit_vulnerability" -d "use_social_engineering" -l "use phishing" -p "high" -r "medium" -t "low" -c "excalidraw"