counter-review

Perform adversarial red-team reviews to identify architectural flaws and abuse cases.

1|1|Updated Mar 9, 2026
One-click install
npx skills add https://github.com/trevorbyrum/claude-skills-suite --skill counter-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: counter-review
Source: https://github.com/trevorbyrum/claude-skills-suite/tree/main/skills/counter-review
Command: npx skills add https://github.com/trevorbyrum/claude-skills-suite --skill counter-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill acts as a hostile reviewer and attacker, proactively identifying architectural weaknesses, abuse cases, and failure scenarios that standard security reviews might miss.

Core Features & Use Cases

  • Adversarial Testing: Simulates malicious user behavior to uncover business logic flaws and exploit paths.
  • Deep Analysis: Assesses architecture fitness, completeness, drift from documentation, and potential failure modes.
  • Use Case: Before deploying a new financial API, use this Skill to simulate attacks that attempt to manipulate transaction logic, bypass rate limits, or chain low-severity vulnerabilities into a critical data breach.

Quick Start

Run a full adversarial red-team review of the current project codebase.

Frequently Asked Questions about counter-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an adversarial red team review on my codebase?

An adversarial red team review analyzes your software project codebase against documentation to identify architectural flaws, business logic abuse cases, and failure scenarios. You trigger a full project review to simulate malicious user behavior and map multi-step attack chains.

What is the best way to find business logic abuse cases before deployment?

To find business logic abuse cases before deployment, simulate attacks that attempt to manipulate transaction logic, bypass rate limits, or chain low-severity vulnerabilities. Stress-testing system assumptions through adversarial testing uncovers these critical exploit paths.

What do I need to provide for a comprehensive vulnerability assessment of my project?

For a comprehensive vulnerability assessment, you need to provide project context, feature lists, and the codebase. These inputs allow the analysis to assess architecture fitness, check for drift from project documentation, and construct multi-step attack chains.

Can I use this to chain low-severity vulnerabilities into a critical data breach simulation?

Yes, you can simulate attacks that chain low-severity vulnerabilities into a critical data breach. The analysis constructs multi-step attack chains by stress-testing system assumptions and assessing architectural fitness against project documentation.

Does standard code review find the same architectural flaws as an adversarial review?

Standard code review often misses architectural flaws and failure scenarios that an adversarial review finds. By acting as a hostile reviewer and attacker, this method proactively identifies abuse cases and exploit paths that standard security reviews overlook.

When do I need to run an attack surface analysis for failure scenarios?

You need to run an attack surface analysis for failure scenarios before deploying critical features, such as a new financial API. This deep analysis assesses architecture fitness, checks for documentation drift, and stress-tests system assumptions to prevent system breaks.