ClaudeSuperPower
SubmitLog in

attack-path-stitcher

Skill

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

0Other

Install

git clone https://github.com/transilienceai/communitytools.git ~/.claude/skills/attack-path-stitcher

What is attack-path-stitcher?

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

What this can do

Capabilities declared in this component's own frontmatter — not inferred.

Inherit all session tools

Declares no tool restrictions — inherits every session tool

~52 tokens of context used while enabled, before you invoke anything

Documentation

README · ~3 min read

Attack Path Stitcher

The Validation Run task (#3) produces confirmed findings per asset. Real attacker risk lives in chains: a finding on asset A leaks credentials that enable a finding on asset B that pivots into asset C. This skill builds that graph.

Mounted onto cloud-agent task #6.

Trigger

Cron daily (default 03:00 UTC). May also re-run after a Validation Run task batch completes.

Workflow

  1. Load inputs.
    • validated/*.json — every confirmed finding across all engagements.
    • artifacts/org-surface.json — the org-wide surface graph (assets, services, network zones, trust relationships).
    • findings/finding-NNN/evidence/raw-source.txt — for credential / token extraction during stitching.

Reviews

Log in to leave a review.

No reviews yet — be the first.

Explore related

Other things in this space — across every part of the ecosystem, not just skills.