How do I install the Claude Red skill?

Run npx skillmds@latest add javimosch/claude-red in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Claude Red safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Claude Red?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Claude Red free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Claude Red?

javimosch (@javimosch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Claude Red by javimosch — Agent Skill

Name: Claude Red
Author: javimosch

File contents

Claude-Red — Offensive Security Skills Library

58 curated SKILL.md files across 13 categories that prime AI agents with expert-level offensive security methodology. Built by SnailSploit.

Installation

git clone https://github.com/SnailSploit/Claude-Red.git
sc skills teach claude-red:quickstart

Categories (58 Skills)

Web Application (16 skills)

SQLi (error/blind/OOB, DB-specific), XSS (stored/reflected/DOM/mutation), SSRF (cloud metadata, filter bypass), SSTI (engine ID, RCE paths), XXE (OOB exfil, blind), IDOR (enumeration, business logic), File Upload (extension bypass, polyglots, webshells), RCE (chaining, command injection), Deserialization (Java/PHP/.NET gadget chains), Race Conditions (TOCTOU, single-packet), Request Smuggling (CL.TE, TE.CL, h2 desync), Open Redirect, Parameter Pollution, GraphQL (introspection, batching, alias IDOR), WAF Bypass, Business Logic

Auth & Identity (2 skills)

JWT (alg:none, key confusion, secret cracking), OAuth (redirect abuse, token leakage, PKCE bypass)

Active Directory (1 skill, expanding to 16)

Kerberoast, ASREProast, ACL abuse, ADCS ESC1-15, delegation, persistence, hybrid AAD

Wireless (13 skills)

WPA2-PSK (handshake, PMKID, hashcat), WPA3-SAE (downgrade, Dragonblood), WPA Enterprise (802.1X/EAP, eaphammer), WPS (Pixie Dust, brute), Evil Twin (KARMA, Mana, captive portal), KRACK/FragAttacks, Deauth, Bluetooth/BLE, Bluetooth Classic, Zigbee/Thread/Matter, Z-Wave, LoRaWAN/sub-GHz

Cloud (1 skill)

AWS/Azure/GCP — privesc, IMDS, cross-account, CSPM evasion

Mobile (1 skill)

Android + iOS — Frida, pinning bypass, storage, biometric, deep links

IoT & Embedded (1 skill, expanding to 10)

Hardware recon, firmware, RTOS, ICS/OT, MQTT/CoAP

Infrastructure & Red Team (7 skills)

Initial Access (phishing, drive-by, supply chain), Advanced Red Team (full kill chain, C2, OPSEC), EDR Evasion (unhooking, indirect syscalls, PPID spoofing), Shellcode (writing, encoding, injection), Keylogger Architecture, Windows Mitigations (ACG, Arbitrary Code Guard), Windows Boundaries (sandbox escape)

Exploit Development (6 skills)

Stack/Heap, ROP chains, Mitigations, Structured Curriculum, Basic Exploitation (Linux), Crash Analysis, TOCTOU

Fuzzing & Vulnerability Research (4 skills)

libFuzzer/AFL++, Coverage-Guided, Bug Identification, Vulnerability Classes

Reconnaissance (2 skills)

OSINT Tools (recon-ng, theHarvester, Maltego), OSINT Methodology

AI Security (1 skill)

Prompt injection, jailbreaking, RAG poisoning, LLM pentesting

Utility (2 skills)

Fast Triage Checklist, Professional Pentest Reporting (CVSS, evidence, exec summary)

Usage Prompts

"I found a SQL injection in a login form. How do I exploit it blind?"
"Walk me through ADCS ESC1 abuse chain"
"I need to bypass EDR for my red team engagement"
"Help me write a ROP chain for a modern x64 binary"
"What's the methodology for WPA3 Dragonblood attack?"
"Generate a professional pentest report from these findings"
"How do I exfiltrate data via DNS tunneling during a red team operation?"

Legal

These skills are intended for authorized engagements only. Each skill includes scope-check guidance. Unauthorized use is illegal.

---name: claude-reddescription: Use this skill when the user needs offensive security expertise — penetration testing, vulnerability assessment, red team operations, bug bounty hunting, or security research for authorized engagements.---# Claude-Red — Offensive Security Skills Library58 curated SKILL.md files across 13 categories that prime AI agents with expert-level offensive security methodology. Built by SnailSploit.## Installation```bashgit clone https://github.com/SnailSploit/Claude-Red.gitsc skills teach claude-red:quickstart```## Categories (58 Skills)### Web Application (16 skills)SQLi (error/blind/OOB, DB-specific), XSS (stored/reflected/DOM/mutation), SSRF (cloud metadata, filter bypass), SSTI (engine ID, RCE paths), XXE (OOB exfil, blind), IDOR (enumeration, business logic), File Upload (extension bypass, polyglots, webshells), RCE (chaining, command injection), Deserialization (Java/PHP/.NET gadget chains), Race Conditions (TOCTOU, single-packet), Request Smuggling (CL.TE, TE.CL, h2 desync), Open Redirect, Parameter Pollution, GraphQL (introspection, batching, alias IDOR), WAF Bypass, Business Logic### Auth & Identity (2 skills)JWT (alg:none, key confusion, secret cracking), OAuth (redirect abuse, token leakage, PKCE bypass)### Active Directory (1 skill, expanding to 16)Kerberoast, ASREProast, ACL abuse, ADCS ESC1-15, delegation, persistence, hybrid AAD### Wireless (13 skills)WPA2-PSK (handshake, PMKID, hashcat), WPA3-SAE (downgrade, Dragonblood), WPA Enterprise (802.1X/EAP, eaphammer), WPS (Pixie Dust, brute), Evil Twin (KARMA, Mana, captive portal), KRACK/FragAttacks, Deauth, Bluetooth/BLE, Bluetooth Classic, Zigbee/Thread/Matter, Z-Wave, LoRaWAN/sub-GHz### Cloud (1 skill)AWS/Azure/GCP — privesc, IMDS, cross-account, CSPM evasion### Mobile (1 skill)Android + iOS — Frida, pinning bypass, storage, biometric, deep links### IoT & Embedded (1 skill, expanding to 10)Hardware recon, firmware, RTOS, ICS/OT, MQTT/CoAP### Infrastructure & Red Team (7 skills)Initial Access (phishing, drive-by, supply chain), Advanced Red Team (full kill chain, C2, OPSEC), EDR Evasion (unhooking, indirect syscalls, PPID spoofing), Shellcode (writing, encoding, injection), Keylogger Architecture, Windows Mitigations (ACG, Arbitrary Code Guard), Windows Boundaries (sandbox escape)### Exploit Development (6 skills)Stack/Heap, ROP chains, Mitigations, Structured Curriculum, Basic Exploitation (Linux), Crash Analysis, TOCTOU### Fuzzing & Vulnerability Research (4 skills)libFuzzer/AFL++, Coverage-Guided, Bug Identification, Vulnerability Classes### Reconnaissance (2 skills)OSINT Tools (recon-ng, theHarvester, Maltego), OSINT Methodology### AI Security (1 skill)Prompt injection, jailbreaking, RAG poisoning, LLM pentesting### Utility (2 skills)Fast Triage Checklist, Professional Pentest Reporting (CVSS, evidence, exec summary)## Usage Prompts- "I found a SQL injection in a login form. How do I exploit it blind?"- "Walk me through ADCS ESC1 abuse chain"- "I need to bypass EDR for my red team engagement"- "Help me write a ROP chain for a modern x64 binary"- "What's the methodology for WPA3 Dragonblood attack?"- "Generate a professional pentest report from these findings"- "How do I exfiltrate data via DNS tunneling during a red team operation?"## LegalThese skills are intended for authorized engagements only. Each skill includes scope-check guidance. Unauthorized use is illegal.

Frequently asked questions

Claude Red