h0p3sf4ll

Appsec Attack Tree — Research agent for Claude Code

Research community

Use proactively to generate a formal AND/OR attack tree for the most critical threats in a repository.

How to install Appsec Attack Tree

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-attack-tree.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-attack-tree.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-attack-tree.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Attack Tree does

name: appsec-attack-tree description: "Use proactively to generate a formal AND/OR attack tree for the most critical threats in a repository. Produces a Mermaid-rendered tree, bypass analysis for each defense node, and a ranked table of leaf nodes by exploitability and impact. Best used after appsec-threat-modeler." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-

Alternatives in Research

Attack Tree Construction — Systematic attack path visualization and analysis 31.9k ★
Fable Worker Sonnet — Fable stage worker for tasks needing real reasoning — research synthesis, nontrivial code, analysis, document 837 ★
Exploit Researcher — Vulnerability research agent — identifies CVEs, finds exploit PoCs, maps attack chains, and develops custom ex 348 ★