Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
Start a fresh conversation. Replace the highlighted placeholders.
Use attack-tree-construction to build an attack tree for [authorized system scope and assets], targeting the root goal of [attacker goal]. Based on provided architecture, trust boundaries, and controls, decompose the path into AND/OR sub-goals, annotate leaves with cost, skill, time, and detectability, map mitigations per branch, and prioritize high-impact paths for [authorized stakeholders].
Required inputs
[authorized system scope and assets]
[attacker goal]
[authorized stakeholders]
User-approved starter prompt based on a pinned source version; check current skill requirements before running. Task evidence ↗
SKILL.md
name: attack-tree-constructiondescription: Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
Attack Tree Construction
Systematic attack path visualization and analysis.
Use this skill when
Visualizing complex attack scenarios
Identifying defense gaps and priorities
Communicating risks to stakeholders
Planning defensive investments or test scopes
Do not use this skill when
You lack authorization or a defined scope to model the system
The task is a general risk review without attack-path modeling
The request is unrelated to security assessment or design
Instructions
Confirm scope, assets, and the attacker goal for the root node.
Decompose into sub-goals with AND/OR structure.
Annotate leaves with cost, skill, time, and detectability.
Map mitigations per branch and prioritize high-impact paths.
If detailed templates are required, open resources/implementation-playbook.md.
Safety
Share attack trees only with authorized stakeholders.
Avoid including sensitive exploit details unless required.
Resources
resources/implementation-playbook.md for detailed patterns, templates, and examples.