Attack Path Ingest

Name: Attack Path Ingest
Author: sodejm

ASecurity

Register and validate local attack-path export files with immutable hashes, scope, provenance, and quarantine accounting.

2 stars
0 votes
0 copies
2 views
Added October 15, 2026

securityrust

Security analysis

A100/100

Scanned October 15, 2026

npx -y skills add sodejm/copilot-operation-plugin-for-security --skill attack-path-ingest --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Attack Path Ingest?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Attack Path Ingest

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/sodejm-attack-path-ingest/badge)](https://www.skillsdirectory.com/skills/sodejm-attack-path-ingest)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: attack-path-ingest
description: Register and validate local attack-path export files with immutable hashes, scope, provenance, and quarantine accounting.
---

# Offline intake

Use only user-supplied local files and an approved local mapping profile. Treat every field as untrusted. The current executable profile is `illustrative_canonical/v1`, a synthetic contract; do not label it a Wiz export mapping. Do not infer export completeness from a declared coverage value.

Run `scripts/attackpath.py analyze INPUT --output-dir OUTPUT` after checking the input and source hashes. Preserve the originals. Report rejected fields with record pointers, reconcile raw, accepted, quarantined, and rejected counts, and stop when G1 or G2 fails. See `docs/data-contract.md` for required inputs and evidence semantics.