Generates attack scripts and a report for testing your security defenses.
npx skills add https://github.com/rbah31/claude-code-workflow --skill red-team-rbah31
Please help me install this Agent Skill. Skill: red-team Source: https://github.com/rbah31/claude-code-workflow/tree/main/.claude/skills/red-team Command: npx skills add https://github.com/rbah31/claude-code-workflow --skill red-team-rbah31
This skill enables security teams to simulate adversarial testing by generating executable red-team scripts and structured findings that validate defenses during sprint cycles and pre-release hardening.
Set TARGET_URL to your test environment and run python3 red_team_attacks.py to generate and execute the red team vectors.
High-intent search queries and answers about installing and using this skill.
To generate executable red-team scripts, this skill produces a runnable Python attacker script with defined payloads and unique attack scenario IDs. You execute the script against your live test environment to prove security gaps during pre-release hardening.
A standardized red-team security audit report includes a structured redteam-output.md file containing formal findings. It maps threat models to concrete tests by detailing attack scenario categories, targets, and payloads used during the offensive security review.
You run offensive security tests against APIs, services, and auth flows by setting TARGET_URL to your test environment and executing python3 red_team_attacks.py. This generates and runs attack vectors to validate your sprint scope defenses.
Yes, you can use the generated attack scripts for regression testing in future sprints. The skill produces a reusable Python script that allows security teams to repeatedly validate defenses and verify whether previously identified runtime security gaps remain closed.
You do not need external dependencies to simulate adversarial testing with this approach. The skill relies on internal red team references, a script-template, and a focused workflow to generate a standalone Python attacker script for your live environment.
abzhawAutomate Playwright browser tests with dev server detection and script execution.
flag3Audit authentication, input handling, secrets, and API endpoints against a security checklist.
oalansilvaSummarize red-team tactics using the MITRE ATT&CK framework.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
