h0p3sf4ll

Attack Tree — Development skill for Claude Code

Development community

Build a formal attack tree for a named asset: maps all attack paths from root goal to leaf conditions, with AND/OR nodes, control effectiveness, and prioritized mitigations.

How to install Attack Tree

Installs to ~/.claude/commands/h0p3sf4ll-threatlint-attack-tree.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/commands/attack-tree.md -o ~/.claude/commands/h0p3sf4ll-threatlint-attack-tree.md

Restart Claude Code, or start a new session, for it to be picked up.

What Attack Tree does

description: "Build a formal attack tree for a named asset: maps all attack paths from root goal to leaf conditions, with AND/OR nodes, control effectiveness, and prioritized mitigations. Saves a Word document." argument-hint: "Asset to attack-tree: database, payment-service, admin-panel, auth-service, or any named component"

Build a formal attack tree for the named asset. Use the `appsec-threat-modeler` agent for deep repository analysis, then structure the results as an attack tree.

Alternatives in Development

Triage PRs — Classify all open PRs by module, review state, scope, and architectural impact — produces a prioritized triage 12.6k ★
n8n Code Python — Python coding in n8n Code nodes with limitations 3.6k ★
/surface — View the prioritized attack surface for a target 1.8k ★