breach

Solid

Designing red team attack scenarios, threat models, MITRE ATT&CK/OWASP application, Purple Team exercises, and AI/LLM red teaming. Use when adversarial security validation is needed.

AI & Automation 76 stars 13 forks Updated 1 weeks ago MIT

Install

View on GitHub

Quality Score: 84/100

Stars 20%
63
Recency 20%
90
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

<!-- CAPABILITIES_SUMMARY: - threat_modeling: Design threat models using STRIDE, PASTA, Attack Trees, and MITRE ATT&CK mapping - attack_scenario_design: Create structured attack scenarios with kill chains and exploitation paths - ai_red_teaming: Test AI/LLM systems for prompt injection, jailbreak, data poisoning, RAG poisoning, system prompt leakage, MCP server compromise, agent skill supply chain poisoning, and agentic risks (OWASP LLM Top 10 2025 + Top 10 for Agentic Applications 2026 [ASI01-ASI10] + Agentic Skills Top 10 [AST01-AST10] + MITRE ATLAS monthly release cadence 2025+) - purple_team_exercise: Design collaborative Red/Blue team exercises with detection validation - attack_surface_analysis: Map and prioritize attack surfaces across application, infrastructure, and AI layers - security_control_validation: Verify WAF/IDS/EDR/guardrail effectiveness through simulated bypass attempts - owasp_attack_testing: Apply OWASP Top 10, LLM Top 10 (2025), and Agentic Top 10 (2026) as attack playbooks - adversarial_report: Generate structured findings with CVSS 4.0 severity (Base+Threat+Environmental+Supplemental), exploitability, and remediation guidance COLLABORATION_PATTERNS: - Sentinel → Breach: Static findings inform attack scenario targeting - Probe → Breach: DAST vulnerabilities feed into exploitation chain design - Canon → Breach: Standards gaps become attack entry points - Oracle → Breach: AI/ML architecture provides attack surface for AI red teaming - Matrix → Breach: ...

Details

Author
simota
Repository
simota/agent-skills
Created
8 months ago
Last Updated
1 weeks ago
Language
HTML
License
MIT

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category

Data & Documents Featured

offensive-advanced-redteam

Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting. Addresses engagement scoping and rules of engagement negotiation, multi-tier C2 infrastructure design with redirectors and domain fronting, malleable traffic profiles and beacon tradecraft, OPSEC discipline including attribution avoidance and indicator management, EDR and AMSI evasion techniques using direct syscalls and unhooking, data collection with chain-of-custody controls, and structured reporting with purple team debrief workflows. Covers assumed-breach, external-to-internal, insider threat, and hybrid physical-cyber engagement scenarios with MITRE ATT&CK mapping throughout. Targets operators planning or executing adversary simulation engagements against mature defenders.

3,234 Updated 1 weeks ago
SnailSploit
AI & Automation Listed

defense-purple-team

Run a purple-team exercise — emulate specific attacker techniques and validate detection/response end to end. Load for "purple team", detection validation, ATT&CK coverage testing, "can we detect X", or turning red-team findings into blue-team improvements. Signals: detection gaps, ATT&CK mapping, control testing.

16 Updated yesterday
NoorQureshi
AI & Automation Listed

thinking-red-team

Deliberately attack your own plans, systems, and assumptions to find weaknesses before adversaries or reality does. Use for security review, architecture validation, plan stress-testing, and pre-launch preparation.

2 Updated today
babypochi06