skills.rest
Jhabbig
JhabbigCOMMUNITY
Explore all skills by this author →
GitHub

attack-tree-construction

Build attack trees with OR, AND, and leaf nodes plus mitigations.

Updated Apr 5, 2026
Search Tags:#threat modeling#security analysis#penetration testing#mitigations#risk communication#attack trees
One-click install
npx skills add https://github.com/Jhabbig/Habbig --skill attack-tree-construction-jhabbig
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: attack-tree-construction
Source: https://github.com/Jhabbig/Habbig/tree/main/.claude/plugins/wshobson/security-scanning/skills/attack-tree-construction
Command: npx skills add https://github.com/Jhabbig/Habbig --skill attack-tree-construction-jhabbig

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams turn a vague threat into a clear attack tree, making it easier to understand how an attacker could achieve a goal and where defenses are weak.

Core Features & Use Cases

  • Threat Path Mapping: Break a high-level attack objective into OR, AND, and leaf steps that show alternative and required paths.
  • Defense Planning: Attach mitigations, cost, time, skill, and detection risk to each node so teams can prioritize controls.
  • Communication and Review: Use the output for penetration test planning, security architecture review, and stakeholder risk briefings.

Quick Start

Ask the assistant to build an attack tree for a specific target, attack goal, or security scenario and include branches, leaf attacks, and mitigations.

Frequently Asked Questions about attack-tree-construction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build an attack tree for threat modeling and penetration testing?▼

To build an attack tree for threat modeling, you break down a high-level attacker goal into structured node hierarchies using OR, AND, and leaf attacks. This visualizes branching paths and defensive gaps for penetration test planning.

What is an attack tree and how does it map attacker goals to defense gaps?▼

An attack tree is a structured hierarchy that visualizes how an attacker achieves a specific goal. It maps branching paths and leaf attacks to reveal defensive gaps, making complex security scenarios easier to analyze.

Can I attach cost, time, and detection risk attributes to attack tree nodes?▼

Yes, you can attach attributes such as cost, time, skill, detection risk, and mitigations to each node in the attack tree. This allows security teams to prioritize controls and plan defenses effectively.

How do I use attack trees for stakeholder risk communication and security architecture review?▼

You use attack trees for stakeholder risk communication by translating vague threats into clear, visualized paths showing attacker goals and weak defenses. This output directly supports security architecture reviews and briefings.

What is the best way to map alternative and required attack paths during security analysis?▼

The best way to map attack paths during security analysis is structuring them with OR nodes for alternative routes and AND nodes for required steps. This ensures comprehensive visualization of all possible attacker branching logic.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

crown-jewel

Identify high-value business impact objectives and prioritize attack surfaces for offensive security engagements.

Community
Intermediate
48Nauts-Operator48Nauts-Operator
3

attack-tree-construction

Build attack trees with OR/AND/LEAF nodes and threat attributes.

Community
Advanced
SanctifiedOpsSanctifiedOps
3

wallet-monitoring-bot

Monitor Solana wallet activity and send alerts across multiple channels.

Community
Intermediate
RepairYourTechRepairYourTech
6

react-flow

Create interactive node-based graph visualizations with React Flow.

Community
Intermediate