Attack Tree Construction

Systematic Threat Path Visualization

Modern security architecture requires more than just a list of risks; it requires a deep understanding of the logical paths an attacker takes to reach a goal. This skill automates the construction of structured attack trees, allowing developers and security engineers to decompose complex threats into atomic, measurable steps.

What it does

• Logical Decomposition: Breaks down high-level objectives into sub-goals using strict AND/OR node logic.
• Attribute Scoring: Evaluates every leaf node based on time, cost, technical skill required, and detection probability.
• Path Analysis: Automatically identifies the "Path of Least Resistance" (lowest cost) and the "Stealthiest Path" (lowest detection).
• Defensive Mapping: Overlays existing controls onto the tree to highlight gaps where no mitigations exist.

Why use this skill?

Manually drawing attack trees is time-consuming and prone to logic errors. This skill ensures consistency in your threat models by enforcing atomic leaf nodes and valid Boolean logic. It serves as a bridge between high-level risk assessments and technical red-teaming, providing a clear visual or data-driven output (JSON, Mermaid, or Python models) that can be integrated into CI/CD security reviews or architecture documentation.

Supported Outputs

The skill can produce structured text trees, Mermaid.js diagrams for GitHub/Notion, JSON for programmatic analysis, or Python data models for Monte Carlo simulations.