Skip to content

claude-red

A library of offensive security skill files (SKILL.md) that give Claude security-testing methodology.

Stars
10.2k
Forks
1.4k
Licence
MIT
Language
Python
Last update
25 days ago
Type
Curated list

What it is

claude-red is a collection of SKILL.md files for the Claude skills system, each covering a specific offensive security topic such as SQL injection, Active Directory attacks, or wireless testing. The README says each file primes Claude with structured methodology for that attack surface, and that skills load on demand based on conversation triggers. The README describes it as intended for authorized red team work, bug bounty triage, security research, and CTF preparation.

  • Install the web skills and ask Claude about SQL injection, which the README says loads offensive-sqli automatically
  • Install only one category, such as web or active-directory, using sparse checkout or the install script
  • Paste a SKILL.md into a Claude Project's system prompt when not using the skills system
  • Use the Active Directory skill as a methodology reference for topics such as Kerberoasting and ADCS

Great for

  • Security professionals who already use Claude and want topic-specific methodology for authorized testing
  • Students preparing for CTFs or learning offensive security concepts with an AI assistant
  • Bug bounty hunters who want structured triage checklists for web vulnerability classes
  • Red team operators looking for a reference for specific attack surfaces

Not ideal for

  • Anyone without authorization to test the target systems, since the README frames the material around authorized engagements
  • People who do not use Claude, because the files are built for the Claude skills system
  • Beginners who want hands-on tools rather than prompt-style guidance; the README does not describe bundled scanners or binaries
Step-by-step guide: how to use claude-redInstall, first run, examples, tips and FAQs

How to get it

  1. 1

    Clone and build from source

    You'll need: Claude access through the Claude skills system, Claude Code, or Claude.ai

    Clone into the Claude skills directory

    git clone https://github.com/SnailSploit/claude-red ~/.claude/skills/claude-red
  2. 2

    Run it

    • Clone the repository into your Claude skills directory
    • Start a Claude conversation and mention a topic such as SQL injection
    • Confirm that Claude loads the matching skill, for example offensive-sqli
  3. 3

    Get the most out of it

    • Use the --category option of the install script to install only the categories you need
    • Use sparse checkout to fetch a single category such as Skills/web
    • In Claude Code, pipe a SKILL.md file into claude with --system-file for a specific task

Downloads

Strengths

  • Covers a broad range of attack surfaces, with 78 skills listed in the README badge across 23 categories
  • Skills load on demand, so the README says unused skills do not consume context
  • Installation is a git clone or a small install script, with options for installing a single category

Trade-offs

  • The README is truncated and the content is a prompt library, so results depend on Claude and on the user's own judgment and authorization
  • The README does not describe how the skills were tested or validated for accuracy
  • Latest release v0.3.0 ships without binaries, and the README does not explain its maturity or update cadence

How it compares

ProjectStarsTypeLevelUpdatedBest for
Claude-Red (this)10.2kCurated listbeginner25 days agoSecurity professionals who already use Claude and want topic-specific methodology for authorized testing
awesome-agent-skills36.8kCurated listbeginner4 days agoDevelopers who use Claude Code, Codex, Cursor, or Gemini CLI and want ready-made skills
claude-skills29.1kCurated listintermediate6 days agoDevelopers who already use Claude Code or a similar agent and want ready-made workflows
prompt-master15.4kAI model / agentbeginner15 days agoPeople who often re-prompt AI tools several times to get a usable result
notebooklm-py20.1kLibraryintermediate4 days agoDevelopers who want to script Gemini Notebook workflows in Python
Skill_Seekers15.3kDev toolintermediate1 months agoDevelopers who want an AI assistant to know a specific library's documentation

Stats synced from GitHub. The assessment above was drafted with AI from the project's README on 2026-11-02 and may miss recent changes — check the README before relying on a command. MIT licence: free to use, modify and distribute, including commercially, as long as you keep the copyright notice.