Attack Flow Generator

by wiz-sec-public

Attack Flow Generator is an AI Engineering skill for Claude Code, published by wiz-sec-public in SITF.

179 stars18 forkson wiz-sec-public/SITFAdded 2026/09/07+1% in starsRepository updated 2026/07/29

View source on GitHub Download repo ZIP

agent-skillssdlc-securitysecurity-tools

Install in seconds

Install Attack Flow Generator

Copy Attack Flow Generator into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/wiz-sec-public/SITF/tree/main/.claude/skills/attack-flow ~/.claude/skills/attack-flow

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/wiz-sec-public/SITF.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: .claude/skills/attack-flow/SKILL.md in wiz-sec-public/SITF
Installs to: ~/.claude/skills/attack-flow
Collection: One of 3 skills cataloged from this repository
Category: AI Engineering — 3475 skills

What Attack Flow Generator does

Attack Flow Generator creates SITF-compliant attack flow JSON from attack descriptions or incident reports. Use it when analyzing supply chain attacks, breaches, or security incidents.

Attack Flow Generator is cataloged under AI Engineering on DirSkills. Attack Flow Generator comes from a repository tagged agent-skills, sdlc-security and security-tools.

Documentation

README

Excerpt

Attack Flow Generator

Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports.

Usage

/attack-flow <attack-name> [source]

attack-name: Identifier for the attack (e.g., "s1ngularity", "solarwinds")
source: URL, "websearch" for auto-research, or omit to use conversation context

Arguments: $ARGUMENTS

Instructions

When this skill is invoked:

Phase 1: Research

If source is "websearch" or a URL, gather attack details:
- Attack timeline and phases
- Entry point and initial access method
- Lateral movement and persistence techniques
- Data exfiltration or impact
- Affected components (CI/CD, VCS, Registry, Endpoint, Production)
If source is omitted, use context from the current conversation.

This is the opening of the README. Read the full README on GitHub.

Commands Attack Flow Generator provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

/attack-flow
/technique-proposal

Frequently asked about Attack Flow Generator

What else does wiz-sec-public publish alongside Attack Flow Generator?
Attack Flow Generator is one of 3 skills that DirSkills catalogs from wiz-sec-public/SITF, the repository it ships in. Its siblings there include Red Team Flow Generator and Technique Proposal. Each one is a separate skill with its own page in this directory, installs the same way Attack Flow Generator does, and is maintained by wiz-sec-public in that same repository. The rest of the collection is listed on the wiz-sec-public/SITF page.
How does Attack Flow Generator compare to other AI Engineering skills?
Attack Flow Generator ranks #3100 by stars among the 3475 AI Engineering skills in this catalog. The most-starred ones next to it are Architecture Decision Records, AI-First Engineering and Agentic OS. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Attack Flow Generator against them. Open each page to compare what they document and how they install.