Agent skill · security · borghei
red-team
This skill should be used when the user asks to "plan a red team engagement", "scope a penetration test", "design a security assessment methodology", "create rules of engagement", or "plan an adversary simulation".
Why this skill is useful
Adds an executable script for planning red team engagements that includes comprehensive methodologies and compliance mapping not commonly found in public resources.
What it needs
Requires python installed locally. About 2k tokens when loaded. Last updated 2026-07-21. 462 stars on the source repository.
What this skill does
Red Team Category: Engineering Domain: Offensive Security Overview The Red Team skill provides tools for planning and scoping security engagements. It helps define rules of engagement, select methodologies, scope targets, plan attack phases, and generate engagement documentation. Clarify First Before planning the engagement, confirm these inputs. If any is unknown or vague, ASK — do not assume: [ ] Authorization & ROE owner — who has signed off and the escalation contacts (no engagement plan without confirmed authorization) [ ] In-scope targets & boundaries — the exact assets in and explicitly out of bounds (drives scope and --target) [ ] Engagement type — red-team / pentest / purple / bug-bounty (sets stealth, methodology, and --type) [ ] Compliance framework — e.g. pci-dss (maps test cases to controls via --compliance) Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact. Quick Start Tools Overview Tool Purpose Key Flags ------ --------- ----------- engagementplanner.py Plan red team engagements with scope, rules, and methodology --type, --target, --duration, --compliance engagementplanner.py Generates comprehensive engagement plans including: Scope definition and boundaries Rules of engagement (ROE) Methodology selection (MITRE ATT&CK, OWASP, PTES, etc.) Phase breakdown with timelines Communication and escalation procedures Deliverables checklist Workflows Full Red Team Engagement 1. Define engagement objectives and scope with engagementplanner.py 2. Review generated rules of engagement with stakeholders 3. Get formal sign-off on scope and ROE 4. Execute phases per the plan timeline 5. Document findings throughout 6. Deliver final report Compliance-Driven Pentest 1. Run planner with --compliance flag for framework-specific requirements 2. Map test cases to compliance controls 3. Execute against compliance-specific checklist 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills borghei/red-team