Agent skill · security · alirezarezvani
red-team
Use when planning or running an authorized red team engagement or attack path analysis. Plans the kill chain with engagement_planner.py: MITRE ATT&CK techniques, choke points, OPSEC risk and crown jewels.
Why this skill is useful
Provides a structured methodology and executable scripts for red team engagement planning that are not commonly known or documented.
What it needs
Requires python3 installed locally. About 9k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
Red Team Red team engagement planning and attack path analysis skill for authorized offensive security simulations. This is NOT vulnerability scanning (see security-pen-testing) or incident response (see incident-response) — this is about structured adversary simulation to test detection, response, and control effectiveness. --- Table of Contents Overview Engagement Planner Tool Kill-Chain Phase Methodology Technique Scoring and Prioritization Choke Point Analysis OPSEC Risk Assessment Crown Jewel Targeting Attack Path Methodology Workflows Anti-Patterns Cross-References --- Overview What This Skill Does This skill provides the methodology and tooling for red team engagement planning — building structured attack plans from MITRE ATT&CK technique selection, access level, and crown jewel targets. It scores techniques by effort and detection risk, assembles kill-chain phases, identifies choke points, and flags OPSEC risks. Distinction from Other Security Skills Skill Focus Approach ------- ------- ---------- red-team (this) Adversary simulation Offensive — structured attack planning and execution security-pen-testing Vulnerability discovery Offensive — systematic exploitation of specific weaknesses threat-detection Finding attacker activity Proactive — detect TTPs in telemetry incident-response Active incident management Reactive — contain and investigate confirmed incidents Authorization Requirement All red team activities described here require written authorization. This includes a signed Rules of Engagement (RoE) document, defined scope, and explicit executive approval. The engagementplanner.py tool will not generate output without the --authorized flag. Unauthorized use of these techniques is illegal under the CFAA, Computer Misuse Act, and equivalent laws worldwide. --- Engagement Planner Tool The engagementplanner.py tool builds a scored, kill-chain-ordered attack plan from technique selection, access level, and crown jewel targets. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/red-team--7b35b2