attack-tree-construction

Construct attack trees and export diagrams to JSON, Mermaid, and PlantUML.

Updated Feb 8, 2026
One-click install
npx skills add https://github.com/TheSethRose/PeptideCalc --skill attack-tree-construction-thesethrose
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: attack-tree-construction
Source: https://github.com/TheSethRose/PeptideCalc/tree/main/.github/skills/security/security-scanning/skills/attack-tree-construction
Command: npx skills add https://github.com/TheSethRose/PeptideCalc --skill attack-tree-construction-thesethrose

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically map security threats by building attack trees to visualize potential attack paths, identify defense gaps, and communicate risks to stakeholders.

Core Features & Use Cases

  • OR/AND node support to model complex attack scenarios and determine feasible threat paths
  • Leaf nodes with attributes (cost, time, detection risk) and mitigations for risk assessment and prioritization
  • Export options to JSON, Mermaid, and PlantUML, plus path and metric analysis to guide defenses
  • Use case: conduct security architecture reviews, penetration test planning, and risk communication with stakeholders

Quick Start

Build a tree with the Python API and export the root to JSON to start analyzing threats.

Frequently Asked Questions about attack-tree-construction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build an attack tree for threat modeling and risk analysis?

Build an attack tree for threat modeling using a programmatic API to construct hierarchical nodes. You define OR/AND nodes to map complex attack scenarios and identify feasible threat paths for security architecture reviews.

What is an attack tree and how does it visualize security threats?

An attack tree is a graph model that visualizes potential security attack paths. It maps threats systematically by decomposing a root goal into sub-goals, using OR/AND node structures to determine feasible paths and identify defense gaps.

Can I export attack tree diagrams to Mermaid and PlantUML?

Yes, you can export attack tree diagrams to Mermaid and PlantUML. The API also supports exporting to JSON, allowing you to generate visual diagrams and integrate the graph model into existing documentation pipelines.

How do I compute metrics like cost and detection risk for attack tree leaf nodes?

Compute metrics like cost, time, and detection risk by assigning attributes to attack tree leaf nodes. The API traverses these nodes to calculate metrics and analyze paths, enabling prioritized risk assessment and defense planning.

Does this attack tree API require external dependencies to run?

No, this attack tree API requires no external dependencies to run. It operates independently to construct trees, traverse nodes, compute metrics, and export diagrams, ensuring a lightweight integration for security analysis workflows.