red-team

Plan red team engagements using MITRE ATT&CK techniques and kill chain phases.

Updated Apr 2, 2026
One-click install
npx skills add https://github.com/4lerman/text_evaluator --skill red-team-4lerman
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: red-team
Source: https://github.com/4lerman/text_evaluator/tree/main/.agents/skills/engineering-skills/red-team
Command: npx skills add https://github.com/4lerman/text_evaluator --skill red-team-4lerman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires argparse, json, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the planning and execution of red team engagements, helping security professionals simulate attacks and test their defenses effectively.

Core Features & Use Cases

  • Engagement Planning: Build structured attack plans from MITRE ATT&CK technique selection, access level, and crown jewel targets.
  • Technique Scoring: Score techniques by effort and detection risk.
  • Choke Point Identification: Identify critical techniques that can block multiple attack paths.
  • OPSEC Risk Assessment: Assess potential detection risks and recommend mitigations.
  • Crown Jewel Targeting: Focus on high-value targets to measure engagement success.
  • Use Case: A security team wants to test their defenses against a potential attacker. They use this Skill to plan an engagement that simulates an attack from the outside, focusing on high-value assets like domain controllers and databases.

Quick Start

Use the red-team skill to plan an engagement with external access, targeting specific MITRE ATT&CK techniques and crown jewels.

Frequently Asked Questions about red-team

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I plan a red team engagement using MITRE ATT&CK techniques?

You can plan red team engagements by selecting MITRE ATT&CK techniques, defining access levels, and targeting crown jewels to build structured attack paths for adversary simulation.

What is adversary simulation and how does it test offensive security defenses?

Adversary simulation emulates real-world attacker behavior using MITRE ATT&CK techniques across kill chain phases to measure an organization's detection and response capabilities.

Can I score MITRE ATT&CK techniques by detection risk and effort for attack path analysis?

Technique scoring evaluates MITRE ATT&CK methods by effort and detection risk, enabling identification of critical choke points that block multiple attack paths during an engagement.

Do I need Python to execute red team engagement planning scripts?

Yes, Python is required to execute the red team planning scripts, which rely on standard libraries like argparse and json to process parameters and generate attack plans.

How do I assess OPSEC risks and identify choke points in an attack path?

OPSEC risk assessment evaluates detection risks for selected techniques and recommends mitigations, while choke point identification highlights critical techniques blocking multiple attack paths.

Related Skills