Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
Claude-Red provides red team operators with structured guidance for internal network engagements. It focuses on the technical execution of reconnaissance, credential abuse, and lateral movement within Active Directory forests.
The skill set covers the progression from initial access to full domain compromise, detailing specific techniques for ADCS abuse and evasion of modern identity defense systems.
Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
Make sure offensive-sqli is installed in your agent before trying this task.
Use the offensive-sqli skill to draft a compact, non-destructive SQL-injection testing plan for an authorized staging endpoint. Map the supplied request's URL parameters, body fields, cookies, headers, API filters, and other database-facing inputs; then identify suitable basic, error-based, and boolean/time-based detection checks and the evidence to record. Do not execute requests. Inputs: the staging endpoint URL, a sanitized request example, the explicitly in-scope parameters, and any known database or framework details.
Engagement scope and permitted validation boundaries
Make sure offensive-bluetooth-classic is installed in your agent before trying this task.
Use the offensive-bluetooth-classic skill to review an authorized device inventory and sanitized SDP service records. Produce a short exposure table listing each device, advertised profile, likely authentication boundary, legacy attack relevance, and the safest next validation step. Do not connect to or modify any device. Inputs: device models and firmware versions, Bluetooth addresses replaced with placeholders if needed, and SDP service records.
Deployment context, such as embedded, IoT, industrial, or modern desktop/mobile
Make sure offensive-krack-fragattacks is installed in your agent before trying this task.
Use the offensive-krack-fragattacks skill to triage an authorized client-device inventory without running an attack. For each client, estimate whether KRACK or FragAttacks testing is likely relevant from its device type, operating system, firmware, and patch date; identify the applicable attack family and CVEs to investigate; and list the evidence needed before controlled testing. Inputs: client models, operating-system or firmware versions, patch dates, and deployment context.
Claude
Cursor
Gemini CLI
Amp