Attack Path Stitcher
Attack Path Stitcher is an agent skill (a SKILL.md file) from transilienceai/communitytools. Stitches confirmed single-asset findings into multi-hop attack paths across the organization. It works with Claude Code and has 595 GitHub stars. Install it by copying the skill folder into your agent's skills directory.
github.com/transilienceai/communitytools/skills/attack-path-stitcher (opens in a new tab)
Data as of from the GitHub API and skills.sh; description from the skill's SKILL.md. Report an error
Add this skill
Claude
Claude Code loads skills from ~/.claude/skills/ (all projects) or .claude/skills/ (one project):
git clone --depth 1 https://github.com/transilienceai/communitytools.git
cp -r communitytools/skills/attack-path-stitcher ~/.claude/skills/attack-path-stitcher # personal, or .claude/skills in a projectIn the Claude apps, zip the attack-path-stitcher folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/transilienceai/communitytools.git
cp -r communitytools/skills/attack-path-stitcher .agents/skills/attack-path-stitcher # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/transilienceai/communitytools.git
cp -r communitytools/skills/attack-path-stitcher .cursor/skills/attack-path-stitcher # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them. The Validation Run task (#3) produces confirmed findings per asset. Real attacker risk lives in chains: a finding on asset A leaks credentials that enable a finding on asset B that pivots into asset C. This skill builds that graph.
Similar skills
More security skills
Ig Humanizer
sergebulaev/instagram-skills
Remove the AI tells readers react to in an Instagram caption or carousel slide: 2026 vocabulary by density, reveal bridges, staccato stacks, stacked triads, performed sincerity, emoji storms; caps…
Active · last commit Oct 15, 2026
SecurityPythonLn 54 Codebase Auditor
levnikolaevich/claude-code-skills
Audits cross-cutting codebase health, security and maintainability; not a single-change review or specialist audit.
Active · last commit Oct 18, 2026
SecurityShellChisle Audit
JayPokale/Chisle
One-shot efficiency audit of a file, diff, or whole repo across BOTH axes at once: over-engineered code (reinvented stdlib, needless abstractions, speculative config) AND bloated prose (verbose…
Active · last commit Oct 24, 2026
SecurityJavaScriptAI Check
harshaneel/humanize
Use when someone asks "does this sound AI?", "check if this is AI-written", "what gives this away as AI", "run ai-check on this", or "score this text".
Maintained · last commit Sep 22, 2026
SecurityHTMLCapabilities Manager
infragate/capa
Manage capa CLI configuration — capabilities.yaml / capabilities.json, skills, MCP servers, tools, hooks, sub-agents, rules, plugins, AGENTS.md / CLAUDE.md, security options, tool exposure modes…
Active · last commit Oct 23, 2026
OfficialSecurityTypeScriptImprove
shobcoder/shob
Survey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute.
Active · last commit Sep 18, 2026
SecurityTypeScript
How do I install the Attack Path Stitcher skill?
Copy the attack-path-stitcher folder (the one containing SKILL.md) into ~/.claude/skills/ for Claude Code, .agents/skills/ for Codex or .cursor/skills/ for Cursor. The agent picks it up automatically when a task matches its description.
Is the Attack Path Stitcher skill free?
Yes. The repository is open source under the MIT license.
Is Attack Path Stitcher maintained?
The repository's most recent commit was on Jul 29, 2026. appsgit only lists skills from repositories with a commit in the last six months.