Yeah I do something similar. I've been using mermaid to create attack trees and as we explore the codebase for vulnerabilities we keep the tree up to date.

This is how I used to do it before LLMs too, it's just way faster now