Attack Tree Construction

Helps you build structured attack trees that map out how someone might compromise a system, breaking down the root goal into AND/OR branches with annotations for cost, skill level, and detectability. You'd reach for this when you need to communicate security risks to non-technical stakeholders, prioritize where to spend defensive budget, or plan a red team engagement scope. The included implementation playbook gives you templates and patterns to work from. It's a solid framework for thinking through threat scenarios systematically, though remember that any attack tree is only as good as your threat modeling assumptions going in.

skills.sh installs: 268
GitHub stars: 39.4K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill attack-tree-construction --agent claude-code

Installs into .claude/skills of the current project.

Files

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

Ask the user to state the exact target URL, IP, account, or resource.

Ask the user to confirm written authorization and the permitted scope.

Show the exact command(s) and explain their expected effect.

Wait for explicit confirmation in the current conversation.

Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.