About

Imported from borghei/claude-skills (engineering/red-team/SKILL.md). Install upstream with npx skills add borghei/claude-skills --skill red-team. Copyright stays with the author (MIT + Commons Clause).

Red Team

Name: red-team
Author: borghei

Category: Engineering Domain: Offensive Security

Overview

The Red Team skill provides tools for planning and scoping security engagements. It helps define rules of engagement, select methodologies, scope targets, plan attack phases, and generate engagement documentation.

Clarify First

Before planning the engagement, confirm these inputs. If any is unknown or vague, ASK — do not assume:

Authorization & ROE owner — who has signed off and the escalation contacts (no engagement plan without confirmed authorization)
In-scope targets & boundaries — the exact assets in and explicitly out of bounds (drives scope and --target)
Engagement type — red-team / pentest / purple / bug-bounty (sets stealth, methodology, and --type)
Compliance framework — e.g. pci-dss (maps test cases to controls via --compliance)

Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.

Quick Start

# Plan a red team engagement
python scripts/engagement_planner.py --type red-team --target "web application" --duration 2w

# Plan a penetration test
python scripts/engagement_planner.py --type pentest --target "api,network" --duration 1w --compliance pci-dss

# Generate rules of engagement document
python scripts/engagement_planner.py --type red-team --target "full-org" --output engagement_plan.json --format json

Tools Overview

Tool	Purpose	Key Flags
`engagement_planner.py`	Plan red team engagements with scope, rules, and methodology	`--type`, `--target`, `--duration`, `--compliance`

engagement_planner.py

Generates comprehensive engagement plans including:

Scope definition and boundaries
Rules of engagement (ROE)
Methodology selection (MITRE ATT&CK, OWASP, PTES, etc.)
Phase breakdown with timelines
Communication and escalation procedures
Deliverables checklist

Workflows

Full Red Team Engagement

Define engagement objectives and scope with engagement_planner.py
Review generated rules of engagement with stakeholders
Get formal sign-off on scope and ROE
Execute phases per the plan timeline
Document findings throughout
Deliver final report

Compliance-Driven Pentest

Run planner with --compliance flag for framework-specific requirements
Map test cases to compliance controls
Execute against compliance-specific checklist
Generate evidence for auditors

Reference Documentation

Red Team Methodology - Frameworks, attack phases, and engagement standards

Common Patterns

Engagement Types

Red Team: Full adversary simulation, stealth required, tests detection/response
Penetration Test: Authorized vulnerability exploitation, known to defenders
Purple Team: Collaborative attack/defense, real-time knowledge sharing
Bug Bounty Triage: Structured vulnerability validation from external reports

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/borghei-claude-skills-red-team/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

borghei-claude-skills-red-team.ocm.jsonjson

{
  "ocm": "1",
  "id": "borghei-claude-skills-red-team",
  "kind": "skill",
  "name": "red-team",
  "description": "This skill should be used when the user asks to \"plan a red team engagement\", \"scope a penetration test\", \"design a security assessment methodology\", \"create rules of engagement\", or \"plan an adversary simulation\".",
  "publisher": "borghei",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "red-team",
      "penetration-testing",
      "security-assessment",
      "adversary-simulation",
      "engagement-planning",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "This skill should be used when the user asks to \"plan a red team engagement\", \"scope a penetration test\", \"design a security assessment methodology\", \"create rules of engagement\", or \"plan an adversary simulation\"."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/borghei/claude-skills",
      "path": "engineering/red-team/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/borghei/claude-skills/blob/HEAD/engineering/red-team/SKILL.md",
      "key": "borghei/claude-skills/engineering/red-team/SKILL.md"
    },
    "license": "MIT + Commons Clause"
  },
  "instructions": "# Red Team\n\n> **Category:** Engineering\n> **Domain:** Offensive Security\n\n## Overview\n\nThe **Red Team** skill provides tools for planning and scoping security engagements. It helps define rules of engagement, select methodologies, scope targets, plan attack phases, and generate engagement documentation.\n\n## Clarify First\n\nBefore planning the engagement, confirm these inputs. If any is unknown or vague, ASK — do not assume:\n\n- [ ] **Authorization & ROE owner** — who has signed off and the escalation contacts (no engagement plan without confirmed authorization)\n- [ ] **In-scope targets & boundar",
  "cost": {
    "context_tokens": 768
  }
}

Fetch it by URL: GET /api/v1/registry/borghei-claude-skills-red-team/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.