attack-path-workbench

Plugin attack-path-workbench from marketplace cops-security-marketplace in sodejm/copilot-operation-plugin-for-security. Commands read from the repo's manifest — 10 days ago.

Skills (6)

• attack-path-assess

  Use for requests to assess the impact of this attack path. Assess evidenced blast radius and potential CIA consequences while keeping business ratings unresolved without an approved impact profile.

• attack-path-ingest

  Use for requests to import these local security exports. Register and validate local attack-path export files with immutable hashes, scope, provenance, and quarantine accounting.

• attack-path-map

  Use for requests to map how an attacker could move between these systems. Prepare evidence-cited ATT&CK behavior mapping, Attack Flow representation, and blocked Wiz graph query intents.

• attack-path-report

  Use for requests to write up the attack paths we found. Produce a reproducible offline attack-path report and local remediation ledger with citations, gaps, and closure criteria.

• attack-path-review

  Use for requests to review this attack path analysis. Apply bounded specialist review to ambiguous path, impact, technique, action, and claim judgments without overriding deterministic gates.

• attack-path-trace

  Use for requests to trace how this weakness could reach an important asset. Trace conditional routes from a supplied finding to a user-defined crown jewel in an evidence-linked local graph.

Subagents (6)

• README
• action-planner
• attack-reviewer
• claim-auditor
• impact-reviewer
• path-skeptic

Similar plugins