security-response-red-purple-team

Map project attack surfaces to MITRE ATT&CK and ATLAS techniques.

Updated May 28, 2026
One-click install
npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-response-red-purple-team
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-response-red-purple-team
Source: https://github.com/SensLiao/Claude-code-setting/tree/main/skills/security-response-red-purple-team
Command: npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-response-red-purple-team

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps organizations plan and map their attack surface against MITRE ATT&CK techniques, assessing existing defenses and planning for improvements.

Core Features & Use Cases

  • Attack Surface Mapping: Maps the project's attack surface to relevant MITRE ATT&CK Enterprise techniques and MITRE ATLAS for AI surfaces.
  • Defense Assessment: Evaluates each technique's control and detection status from existing evidence.
  • Purple Team Coordination: Plans coordination between red and purple teams based on the shared ATT&CK matrix.
  • Use Case: Imagine you are responsible for security in a cloud-based application. This Skill can help you identify potential attack vectors and ensure that defenses are in place to detect and respond to them.

Quick Start

Run the security-response-red-purple-team skill to generate an attack coverage matrix for your project.

Frequently Asked Questions about security-response-red-purple-team

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map my project's attack surface to MITRE ATT&CK techniques?

To map your attack surface to MITRE ATT&CK techniques, this Skill evaluates your project against the ATT&CK Enterprise and ATLAS frameworks for AI surfaces. It generates an attack coverage matrix based on your existing threat modeling data.

What is purple team coordination and how does it work with ATT&CK mapping?

Purple team coordination aligns red and blue team activities through a shared MITRE ATT&CK matrix. This Skill plans the coordination by mapping identified attack vectors and evaluating the corresponding defense status.

Do I need existing AppSec evidence to assess defense status against MITRE ATT&CK?

Yes, assessing defense status requires access to existing AppSec evidence and threat modeling data. The Skill evaluates control and detection capabilities by analyzing this pre-existing project security documentation.

Can I evaluate defense status for AI surfaces using MITRE ATLAS?

Yes, you can evaluate defense status for AI surfaces using MITRE ATLAS. The Skill maps your project's attack surface against both MITRE ATT&CK Enterprise and MITRE ATLAS frameworks to ensure comprehensive coverage.

What is the best way to plan purple team coordination for a cloud application?

The best way to plan purple team coordination is mapping your cloud application's attack surface to MITRE ATT&CK techniques. This Skill identifies potential attack vectors and evaluates existing defenses to coordinate red and purple team testing.

Related Skills