purple-team

Orchestrate red-team attacks and blue-team patches for security guardrails and APIs.

150|19|Updated Jun 15, 2026

Search Tags:#security testing #git integration #red-team #api security #hardening #blue-team

Ready to run

npx skills add https://github.com/gaasher/Agent-Loop-Skills --skill purple-team

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: purple-team
Source: https://github.com/gaasher/Agent-Loop-Skills/tree/main/loops/purple-team
Command: npx skills add https://github.com/gaasher/Agent-Loop-Skills --skill purple-team

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of hardening security guardrails and APIs by orchestrating red and blue team attacks in a closed loop until the target is no longer vulnerable.

Core Features & Use Cases

Automated Security Testing: Orchestrate red-team attacks to find vulnerabilities in a system, followed by blue-team efforts to patch these vulnerabilities.
Continuous Improvement: Run multiple cycles of testing and patching, automatically verifying the effectiveness of each fix.
Pull Request Integration: Automatically generate pull requests with the fixes for review and application.

Quick Start

Execute the purple-team skill with the target command, source files, and other necessary details, and let it run to harden the system.

Frequently Asked Questions about purple-team

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate red-team and blue-team security testing for API hardening?▼

Automated security testing for API hardening is achieved by orchestrating red-team attacks to find vulnerabilities, followed by blue-team patching in a closed loop until the target is no longer vulnerable. This cycle continuously verifies the effectiveness of each applied security fix.

Can I automatically generate pull requests for security guardrail fixes?▼

Yes, you can automatically generate pull requests for security guardrail fixes. The process integrates with git and GitHub to hand off the blue-team patches directly into pull requests, allowing teams to review and apply the hardened security configurations seamlessly.

What is a closed-loop red-blue team cycle for continuous security improvement?▼

A closed-loop red-blue team cycle is an automated process where red-team attacks probe for vulnerabilities and blue-team efforts patch them. It runs multiple automated cycles of testing and patching, continuously verifying each fix to ensure the system is fully hardened against threats.

Does automated API security testing require Python and additional skills to run?▼

Yes, automated API security testing requires Python 3.9 or higher to manage the orchestration. It also depends on additional red-team and blue-team skills to execute the attacks and generate the necessary patches for hardening your APIs.

What is the best way to harden security guardrails without manual patching?▼

The best way to harden security guardrails without manual patching is using an automated red-blue team orchestration cycle. It identifies vulnerabilities, applies fixes, verifies effectiveness, and generates pull requests, eliminating manual intervention until the target is no longer vulnerable.