attack-path-analysis Skill
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans. Published by openai in plugins.
What is attack-path-analysis Skill?
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans. Published by openai in plugins. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Data analysis
- Security review use cases
- Data analysis use cases
Technical details
- Install or run with Copy skill directory
When to use attack-path-analysis Skill
- Use it for security review.
- Use it for data analysis.
Built with
Editorial notes
Source
- Creator: openai
- Repository: openai/plugins
- Skill file: plugins/codex-security/skills/attack-path-analysis/SKILL.md
What it does
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
Skill instructions
Security Attack Path Analysis Objective Turn validated or still-plausible findings into explicit attacker stories, structured attack-path analysis facts, severity calibration, and a final reportability decision grounded in the threat model. Artifact Resolution The path references in this skill are the default locations for this phase. If the user explicitly provides a different path for a required input or output, use the user-provided path instead of the corresponding default path referenced in this skill. If a required input is still missing, stop and ask the user for it before continuing. Use the shared scan artifact path conventions in ../../references/scan-artifacts.md. Workflow 1. Load the per-scan threat model path from ../../references/scan-artifacts.md as the repo-specific threat-model source of truth. Start from this along with the potential findings. Both inputs are required for this workflow. - For repository-wide and scoped-path scans, include validation closure rows marke
Explore related resources
Frequently asked questions
What is attack-path-analysis?
attack-path-analysis is a open-source AI agent skill with Copy skill directory. Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity.
Who is attack-path-analysis best for?
attack-path-analysis is best for reusing agent instructions, scripts, and references, security review workflows, data analysis workflows.
How do I install attack-path-analysis?
Install or run attack-path-analysis using Copy skill directory. Check attack-path-analysis for the latest setup command.
Is attack-path-analysis actively maintained?
attack-path-analysis may need a closer maintenance check before production use.
Auto-fetched from GitHub.
