---
title: "Kill chain analysis"
method: POST
path: "/skill/chain"
---

# Kill chain analysis

`POST /skill/chain`

Analyze findings for kill chain opportunities.

## Query parameters

- `directory` string

## Request body

- object
  - `findings` object[], required
    - `skill_id` string, required
    - `severity` 'info' | 'low' | 'medium' | 'high' | 'critical', required
    - `cwe_id` string
    - `tech_stack` string[]

## Response `200`

Kill chain analysis results

- object
  - `chains` object[], required
    - `skills` string[], required
    - `combined_severity` string, required
    - `description` string, required
    - `next_steps` string[], required
  - `summary` string, required

## Other responses

- `400` — Bad request

---

[API](https://skmtc.net/cyberstrikeus/apis/cyberstrike.md) · [All operations](https://skmtc.net/cyberstrikeus/apis/cyberstrike/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cyberstrikeus/cyberstrike/revisions/4e11f1aed2fd/schema)