Download

Skill UI

Browse and discover 6006+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Attack Path , found 13 results

Default Newest Most Downloaded

Attack Tree Construction Toolkit

attack-tree-construction

sickn33/antigravity-awesome-skills

A structured skill for building complete attack trees that map threat paths, highlight defense gaps, and communicate risk priorities when planning security assessments or investments.

Attack Tree Construction Toolkit

attack-tree-construction

sickn33/antigravity-awesome-skills

A structured skill for building complete attack trees that map threat paths, highlight defense gaps, and communicate risk priorities when planning security assessments or investments.

Repository Threat Modeling

security-threat-model

tech-leads-club/agent-skills

Provides a repository-grounded AppSec threat modeling workflow that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations tied to repo evidence, guiding creation of concise Markdown threat reports.

AI Actions Workflow Auditor

agentic-actions-auditor

sickn33/antigravity-awesome-skills

Guides static reviews of GitHub Actions workflows that invoke AI coding agents, teaching how to find workflow files, trace composite actions, capture security-relevant settings, and detect attacker-controlled data paths to agents in CI/CD pipelines.

GitHub Actions Security Review

gha-security-review

sickn33/antigravity-awesome-skills

Detect exploitable vulnerabilities in GitHub Actions workflows by analyzing triggers, inputs, secrets, and referenced actions, ensuring every report includes a concrete attack path for external attackers.

BloodHound AD Recon

conducting-internal-reconnaissance-with-bloodhound-ce

mukul975/Anthropic-Cybersecurity-Skills

Use BloodHound CE for internal Active Directory reconnaissance to map attack paths, prioritize escalation chains, and document AD misconfigurations during red-team engagements.

Active Directory Attack Simulation

executing-active-directory-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates authorized Active Directory attack paths using BloodHound, Mimikatz, Impacket and related tools to surface misconfigurations, weak credentials, Kerberos flaws and privilege paths before adversaries exploit them; ideal for AD pentests, SOC/EDR validation, and privilege escalation resistance checks.

BloodHound AD Recon

exploiting-active-directory-with-bloodhound

mukul975/Anthropic-Cybersecurity-Skills

BloodHound leverages graph theory on Active Directory data to expose hidden relationships, letting red teams visualize attack paths from compromised accounts to Domain Admins, spot ACL and delegation flaws, and plan privilege escalation.

Attack Path Mapping

implementing-attack-path-analysis-with-xm-cyber

mukul975/Anthropic-Cybersecurity-Skills

Implement XM Cyber's continuous exposure platform to map end-to-end attack paths, highlight choke points, and prioritize the small set of exposures threatening critical business assets for faster risk reduction.

Active Directory BloodHound Analysis

performing-active-directory-bloodhound-analysis

mukul975/Anthropic-Cybersecurity-Skills

Guides red-teamers through collecting Active Directory data with SharpHound/AzureHound, importing it into BloodHound CE or Legacy, and using Cypher queries to map attack paths from compromised users to Domain Admin.

Active Directory Attack Path Test

performing-active-directory-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Focused Active Directory penetration testing workflow that enumerates domain objects, maps BloodHound attack paths, exploits Kerberos weaknesses, leverages ADCS/DCSync, and demonstrates full domain compromise scenarios for red teams.

API Rate Limiting Bypass

performing-api-rate-limiting-bypass

mukul975/Anthropic-Cybersecurity-Skills

Simulates API rate limit bypass attacks by probing headers, spoofing IPs, altering paths, and checking enforcement across methods, helping security testers verify throttling and brute-force protections.

Language