skills.rest
subimagesec
subimagesecOFFICIAL
Explore all skills by this author →
Website𝕏@subimagesecGitHub

review-attack-path

Analyze SubImage attack paths to explain attacker movement, blast radius, and remediation.

Updated Apr 30, 2026
Search Tags:#security#remediation#graph analysis#blast radius#cypher#attack path#subimage
One-click install
npx skills add https://github.com/subimagesec/skills --skill review-attack-path
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-attack-path
Source: https://github.com/subimagesec/skills/tree/main/plugins/subimage-mcp/skills/review-attack-path
Command: npx skills add https://github.com/subimagesec/skills --skill review-attack-path

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security operators turn a raw attack path into a clear explanation of attacker movement, blast radius, terminal impact, and the fastest remediation.

Core Features & Use Cases

  • Path Walkthroughs: Review a known attack path step by step in plain English and identify the most sensitive impacted asset.
  • Asset Pivot Analysis: Start from a specific asset and determine whether it appears in one or more attack paths.
  • n+1 Extension Hunts: Probe beyond the terminal node to look for credible next steps the engine has not yet modeled.
  • What-if Scenarios: Simulate a compromised asset or added capability to understand how the path would change.

Quick Start

Ask this Skill to review a specific SubImage attack path by id and explain the key pivots, terminal impact, and fastest remediation in plain language.

Frequently Asked Questions about review-attack-path

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze an attack path to understand blast radius and remediation options?▼

Attack path analysis explains attacker movement, blast radius, and terminal impact by walking through known path IDs step by step, identifying the most sensitive impacted asset and the fastest remediation in plain language.

How do I check if a specific asset appears in multiple attack paths in a graph?▼

Asset pivot analysis starts from a specific asset ID and queries the graph to determine whether it appears in one or more attack paths, mapping its connectivity and exposure across the modeled environment.

Can I simulate a compromised asset to see how an attack path would change?▼

What-if scenario analysis simulates a compromised asset or added capability to understand how the path would change, probing the graph for credible next steps the engine has not yet modeled.

What do I need to provide to review an attack path in the SubImage graph?▼

Reviewing an attack path requires attack path IDs or asset IDs, followed by graph schema probes and bounded Cypher queries to gather validated evidence before reporting transitions and impacts.

How do I find credible next steps beyond a terminal node in an attack path?▼

n+1 extension hunts probe beyond the terminal node to look for credible next steps the engine has not yet modeled, using bounded Cypher queries to validate evidence before reporting.

Related Skills

Explore More Software Engineering Skills→
subimagesecsubimagesec

build-cypher-query

Build Cypher queries for SubImage Neo4j relationship investigations.

Official
Advanced
0xHoneyJar0xHoneyJar

triage

Triages user signals and error reports to identify affected code paths and estimate blast radius.

Official
Intermediate
gganbukim1gganbukim1

codebase-memory-reference

Reference MCP tools and Cypher queries for codebase knowledge graph exploration.

Community
Basic
ricablericable
1

@ruvector/graph-node

Create and query RuVector graph databases with Cypher from Node.js.

Community
Advanced