Risk-based prioritisation of confirmed attack paths. An agent skill from transilienceai/communitytools.
$ npx skills add transilienceai/communitytools --skill risk-prioritiser -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install transilienceai/communitytools risk-prioritiser --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/risk-prioritiser .claude/skills/risk-prioritiser && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "risk-prioritiser" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/risk-prioritiser into .claude/skills/risk-prioritiser/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "risk-prioritiser", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/transilienceai/communitytools/tree/main/skills/risk-prioritiserType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add transilienceai/communitytools --skill risk-prioritiser -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install transilienceai/communitytools risk-prioritiser --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/risk-prioritiser .agents/skills/risk-prioritiser && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "risk-prioritiser" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/risk-prioritiser into .agents/skills/risk-prioritiser/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "risk-prioritiser", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add transilienceai/communitytools --skill risk-prioritiser -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install transilienceai/communitytools risk-prioritiser --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/risk-prioritiser .cursor/skills/risk-prioritiser && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "risk-prioritiser" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/risk-prioritiser into .cursor/skills/risk-prioritiser/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "risk-prioritiser", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/transilienceai/communitytools.git --path skills/risk-prioritiser--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add transilienceai/communitytools --skill risk-prioritiser -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install transilienceai/communitytools risk-prioritiser --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/risk-prioritiser .gemini/skills/risk-prioritiser && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "risk-prioritiser" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/risk-prioritiser into .gemini/skills/risk-prioritiser/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "risk-prioritiser", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install transilienceai/communitytools risk-prioritiserInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add transilienceai/communitytools --skill risk-prioritiser -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/risk-prioritiser .github/skills/risk-prioritiser && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "risk-prioritiser" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/risk-prioritiser into .github/skills/risk-prioritiser/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "risk-prioritiser", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add transilienceai/communitytools --skill risk-prioritiser -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install transilienceai/communitytools risk-prioritiser --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/risk-prioritiser .opencode/skills/risk-prioritiser && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "risk-prioritiser" agent skill from https://github.com/transilienceai/communitytools/tree/main/skills/risk-prioritiser into .opencode/skills/risk-prioritiser/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "risk-prioritiser", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
risk-prioritiserRisk-based prioritisation of confirmed attack paths. An agent skill from transilienceai/communitytools.
Risk Prioritiser is an agent skill from transilienceai/communitytools. Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.
Its SKILL.md is about 1.5k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `reference/scoring-formula.md`).
It sits in Security, covering Prioritization frameworks. The repository describes itself as: Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research. The licence is MIT.
7 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit 95fdc12. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md (its code samples are json).
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Risk Prioritiser loads about 1.5k tokens when it runs. Until then it costs about 52 tokens; SKILL.md has 579 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from transilienceai/communitytools at commit 95fdc12, republished under its MIT licence (© transilienceai). 579 words, ~1,526 tokens.
.claude/skills/risk-prioritiser/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.Consume the attack-path graph + the client-supplied business-tier map and emit a single ranked list of paths the org should remediate first. Mounted onto cloud-agent task #7.
Cron daily after attack-path-stitcher (task #6) completes. Also event-fires when a new validated/*.json is written with nvd.score >= 9.0.
artifacts/attack-paths.json — graph from task #6. Split into confirmed_paths (RFP-grade) and inferred_paths (topology/supply-chain).business-tier-map.csv — client-supplied asset → tier. Search order: {OUTPUT_DIR}/business-tier-map.csv → projects/rfp-3.3/schemas/business-tier-map.csv.confirmed_paths entry.feasibility = product of every edge's feasibility along the path. For confirmed paths this is always 1.0.technical_severity = max_cvss_along_path / 10.business_impact = tier weight of the destination (crown_jewel = 1.0 by definition).entry_exposure = 1.0 if entry node is external: true, else 0.5.feasibility × technical_severity × business_impact × entry_exposure.feasibility = 1.0, business_impact = asset's own tier weight, hop count = 1.inferred_paths entry, but cap their bucket placement at theoretical regardless of numeric score. Inferred paths NEVER reach immediate / short_term / medium_term — RFP §3.3 requires "confirmed", and inferred paths are evidence-deficient by construction.immediate (0-7 days): confirmed AND score ≥ 0.6short_term (7-30 days): confirmed AND 0.3 ≤ score < 0.6medium_term (30-90 days): confirmed AND 0.1 ≤ score < 0.3monitor: confirmed AND score < 0.1theoretical (track-only): any path with path_class != "confirmed". Surfaced in board reports but excluded from the remediation SLA roadmap.artifacts/attack-paths-ranked.json + attack-paths-ranked.md. Each row carries path_class so downstream consumers can filter.| Tier | Weight |
|---|---|
crown_jewel | 1.00 |
revenue | 0.70 |
support | 0.40 |
dev | 0.20 |
unknown | 0.30 |
The unknown weight is deliberately above support to bias toward investigating un-mapped assets — they often turn out to be high-tier once discovered.
{OUTPUT_DIR}/
artifacts/
attack-paths-ranked.json
attack-paths-ranked.mdattack-paths-ranked.json schema:
{
"generated_at": "2026-05-13T03:30:00Z",
"tier_weights_used": {"crown_jewel": 1.0, "revenue": 0.7, "support": 0.4, "dev": 0.2, "unknown": 0.3},
"ranked": [
{
"rank": 1,
"kind": "path",
"path_class": "confirmed",
"path_id": "asset05->asset42->asset99",
"hops": ["asset05", "asset42", "asset99"],
"feasibility": 1.0,
"max_cvss": 9.8,
"business_impact": 1.0,
"entry_exposure": 1.0,
"score": 0.98,
"bucket": "immediate",
"remediation_focus": "asset05"
},
{
"rank": 2,
"kind": "finding",
"path_class": "confirmed",
"finding_id": "finding-018",
"asset": "asset42",
"feasibility": 1.0,
"max_cvss": 9.1,
"business_impact": 0.7,
"entry_exposure": 1.0,
"score": 0.637,
"bucket": "immediate"
}
],
"buckets": {"immediate": 4, "short_term": 11, "medium_term": 22, "monitor": 8, "theoretical": 14}
}For each ranked path, pick a single remediation_focus asset — the one whose patch breaks the chain at the lowest cost:
hops[0]). Patching the externally-reachable foothold breaks every downstream hop and is the cheapest patch surface operationally.This rule yields a single deterministic asset id per path. The previous "edge contribution formula" was deprecated — on uniformly-confirmed chains every edge has identical contribution, which gives no useful signal.
attack-paths.json. Do not re-derive feasibility / CVSS — those are already validated by upstream tasks.business-tier-map.csv is authoritative. If an asset is missing from the map, use unknown tier weight + flag unmapped_assets[] at the top of the JSON output.--thresholds argument when running on a client with different remediation cadences. Default values match the Transilience report's "Immediate / Short-term / Medium-term" labels.The scoring is implemented deterministically by tools/risk-prioritise.py (not delegated to an LLM agent), to satisfy Rule 3 (stable rank for stable input). The tool reads artifacts/attack-paths.json and writes the two output files. Override the tier weights or bucket thresholds with --tier-weights / --thresholds JSON arguments — recorded in the output for audit.
reference/scoring-formula.md — worked example + edge-case behaviour.projects/rfp-3.3/schemas/business-tier-map.csv — input schema and example rows.tools/risk-prioritise.py — deterministic implementation.© transilienceai, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 1 other file in skills/risk-prioritiser of transilienceai/communitytools.
Open the folder on GitHubat commit 95fdc12
Risk Prioritiser next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Risk Prioritiser this skilltransilienceai/communitytools | 563 | — | ~1.5k | Automated safety check: Pass | MIT | |
| Performing Cve Prioritization With Kev Catalogmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.6k | Automated safety check: Pass | Apache-2.0 | |
| Mapping Mitre Attack Techniquesmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~1.8k | Automated safety check: Pass | Apache-2.0 | |
| Threat Detectionalirezarezvani/claude-skills | 28k | — | ~3.5k | Automated safety check: Pass | MIT | |
| Building Ioc Enrichment Pipeline With Openctimukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.5k | Automated safety check: Pass | Apache-2.0 | |
| Managing Vulnerabilitiesancoleman/ai-design-components | 525 | — | ~3.8k | Automated safety check: Pass | MIT |
mukul975/Anthropic-Cybersecurity-Skills
Fetch and parse the CISA Known Exploited Vulnerabilities (KEV) catalog, enrich it with EPSS scores and CVSS metrics, and build a multi-factor prioritization engine and report that ranks CVE…
mukul975/Anthropic-Cybersecurity-Skills
Maps observed adversary behaviors, security alerts, and detection rules to MITRE ATT&CK techniques and sub-techniques to quantify detection coverage and guide control prioritization.
alirezarezvani/claude-skills
A skill your agent uses when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry.
mukul975/Anthropic-Cybersecurity-Skills
Build an automated IOC enrichment pipeline on OpenCTI (STIX 2.1 native threat intel platform) using its internal enrichment connectors to pull context from VirusTotal, Shodan, AbuseIPDB, and…
ancoleman/ai-design-components
Implementing multi-layer security scanning (container, SAST, DAST, SCA, secrets), SBOM generation, and risk-based vulnerability prioritization in CI/CD pipelines.
cbrock84/headcount
Runs the loop from discovering a weakness to confirming it is fixed — scanning, triage, prioritization by real exploitability, remediation tracking, and patch policy.
transilienceai/communitytools
Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation.
transilienceai/communitytools
GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.
transilienceai/communitytools
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation.
transilienceai/communitytools
Generate ONE strong password and apply it to each referenced file (PDF, Word, Excel, PowerPoint, or any type).
transilienceai/communitytools
Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits.
transilienceai/communitytools
Security-focused source code review and SAST. An agent skill from transilienceai/communitytools.
Categories
Risk-based prioritisation of confirmed attack paths. An agent skill from transilienceai/communitytools. Risk Prioritiser is an agent skill from transilienceai/communitytools. Risk-based prioritisation of confirmed attack paths.
Risk Prioritiser fits situations like: tasks that involve Prioritization frameworks.
Run `npx skills add transilienceai/communitytools --skill risk-prioritiser -a claude-code`. Or copy the skill folder (skills/risk-prioritiser in transilienceai/communitytools) into .claude/skills/risk-prioritiser in your project. Claude Code loads it when a task matches its description.
Run `npx skills add transilienceai/communitytools --skill risk-prioritiser -a codex`. Or copy the skill folder (skills/risk-prioritiser in transilienceai/communitytools) into .agents/skills/risk-prioritiser in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add transilienceai/communitytools --skill risk-prioritiser -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/risk-prioritiser, .gemini/skills/risk-prioritiser, .github/skills/risk-prioritiser and .opencode/skills/risk-prioritiser in your project.
SKILL.md names no scripts, command-line tools or credentials: Risk Prioritiser is instructions for the agent only.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Risk Prioritiser is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.5k tokens (SKILL.md is roughly 6.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Risk Prioritiser: Performing Cve Prioritization With Kev Catalog (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Mapping Mitre Attack Techniques (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Threat Detection (alirezarezvani/claude-skills, 28k stars) and Building Ioc Enrichment Pipeline With Opencti (mukul975/Anthropic-Cybersecurity-Skills, 34k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
transilienceai (a GitHub organization) maintains it in transilienceai/communitytools, which has 563 GitHub stars. The repository holds 35 skills in this directory. The repository was last updated on July 29, 2026.
Source: transilienceai/communitytools on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
