attack-tree-construction

1# Attack Tree Construction
2 
3Systematic attack path visualization and analysis.
4 
5## Use this skill when
6 
7- Visualizing complex attack scenarios
8- Identifying defense gaps and priorities
9- Communicating risks to stakeholders
10- Planning defensive investments or test scopes
11 
12## Do not use this skill when
13 
14- You lack authorization or a defined scope to model the system
15- The task is a general risk review without attack-path modeling
16- The request is unrelated to security assessment or design
17 
18## Instructions
19 
20- Confirm scope, assets, and the attacker goal for the root node.
21- Decompose into sub-goals with AND/OR structure.
22- Annotate leaves with cost, skill, time, and detectability.
23- Map mitigations per branch and prioritize high-impact paths.
24- If detailed templates are required, open `resources/implementation-playbook.md`.
25 
26## Safety
27 
28- Share attack trees only with authorized stakeholders.
29- Avoid including sensitive exploit details unless required.
30 
31## Resources
32 
33- `resources/implementation-playbook.md` for detailed patterns, templates, and examples.