attack-tree-construction

Construct attack trees with OR/AND/LEAF nodes and export to Mermaid or PlantUML.

Updated Feb 24, 2026

Search Tags:#mermaid #threat-modeling #builder #plantuml #security-architecture #attack-tree

Ready to run

npx skills add https://github.com/chicanoandres702/SentientAIBrowser --skill attack-tree-construction-chicanoandres702

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: attack-tree-construction
Source: https://github.com/chicanoandres702/SentientAIBrowser/tree/main/.agents/workflows/attack-tree-construction
Command: npx skills add https://github.com/chicanoandres702/SentientAIBrowser --skill attack-tree-construction-chicanoandres702

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Attack trees provide a structured, visual way to map attacker goals, potential defense gaps, and communication of security risks to stakeholders.

Core Features & Use Cases

Attack Tree Structure and Node Types (OR, AND, LEAF) to model complex attack paths.
Attack Attributes (Cost, Time, Skill, Detection) for quantitative risk assessment.
Templates and Builders to quickly assemble trees, and exporters to Mermaid and PlantUML for visualization.
Best practices for threat modeling, defender planning, and risk communication.

Quick Start

Build an attack-tree for your scenario using the AttackTreeBuilder and review the leaf attacks for mitigations.

Frequently Asked Questions about attack-tree-construction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I build an attack tree for threat modeling and security architecture reviews?▼

To build an attack tree for threat modeling, use the AttackTreeBuilder to construct structured OR, AND, and LEAF nodes. This structure models complex attack paths and maps attacker goals to identify potential defense gaps.

Can I export attack trees to Mermaid or PlantUML for stakeholder visualization?▼

Yes, you can export attack trees to Mermaid and PlantUML. The provided exporters automatically convert the structured attack tree data model into clear visual diagrams for risk communication across organizations.

What attributes can I assign to leaf attacks for quantitative risk assessment?▼

You can assign Cost, Time, Skill, and Detection attributes to leaf attacks. These attributes enable quantitative risk assessment by evaluating the resources and detectability required for each potential threat path.

When do I need an attack tree for red-team planning and risk communication?▼

You need an attack tree for red-team planning when visualizing complex attacker goals and defense gaps. It provides a structured, visual way to map threat paths and communicate security risks to stakeholders effectively.

What is the difference between OR, AND, and LEAF nodes in an attack tree?▼

In an attack tree, OR nodes represent alternative attack paths, AND nodes require multiple conditions to be met simultaneously, and LEAF nodes are individual attack actions with specific attributes like cost and detection probability.

Do I need any specific dependencies to generate attack trees?▼

No specific dependencies are required to generate attack trees. The skill operates independently with a structured data model and built-in exporters to visualize threat paths without external library requirements.