Home / Skills / attack-path-analysis
attack-path-analysis From the maker
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
Why this score
This repo hosts 10 skills, so its 11,139 stars are split between them (about 1,114 each) for scoring.
Popularity score: 80/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 29ec9114367f, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneattack-path-analysis openai/codex-security · Skill | 80 | ★ 11k | ≈73 always | 16d ago |
| cloud-attack-path zero-lab-ai/skills · Skill Both about attack and path | 55 | ★ 82 | ≈89 always | 20d ago |
| shiro-attack-cli SummerSec/ShiroAttack2 · Skill Both about attack | 71 | ★ 2.6k | ≈61 always | 5mo ago |
| attack-cache-poison CyberStrikeus/CyberStrike · Skill Both about attack | 71 | ★ 3.2k | ≈29 always | 21d ago |
| path-types openinterpreter/openinterpreter · Skill Both about path and explicitly | 89 | ★ 69k | ≈41 always | 25d ago |
| attack-planner 0xSteph/pentest-ai-agents · Subagent Both about attack and finding | 64 | ★ 2.4k | ≈21 in chat | 29d ago |