Skip to main content
affpapa.org
RU EN
skill

red-team-tactics — Claude Code skill: what it does, how to install

This skill organizes adversary simulation around MITRE ATT&CK and helps document findings. Use it to plan attack phases and examine gaps in detection.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --skill security/red-team-tactics
Open on GitHub

What red-team-tactics does

The skill maps a simulated attack from reconnaissance and initial access through lateral movement, collection, and impact. Its guidance covers access options, privilege escalation, and defense evasion on Windows and Linux, along with Active Directory attack categories.

It also outlines how to report a test: record the attack chain, techniques used, objectives reached, and points where detection failed. The available file tools are Read, Glob, and Grep. Keep the exercise within its agreed scope; the skill says to minimize impact and not go beyond proof of concept.

What it helps with

  • structure a test plan around MITRE ATT&CK phases
  • compare initial access options against an exercise scenario
  • review privilege escalation checks for Windows and Linux
  • record detection gaps in a red-team report

Example prompts for the agent

  • Plan a scoped adversary simulation using MITRE ATT&CK phases.
  • Review privilege escalation checks for a Windows and Linux assessment.
  • Help me document the attack chain and detection gaps in this report.

How to install red-team-tactics

1claude-code-templates

npx claude-code-templates@latest --skill security/red-team-tactics

2Skills CLI (Vercel)

npx skills add davila7/claude-code-templates --skill red-team-tactics -a claude-code

3Manually: put the files in place

~/.claude/skills/red-team-tactics/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/red-team-tactics/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about red-team-tactics

How do I install red-team-tactics in Claude Code?

Run npx claude-code-templates@latest --skill security/red-team-tactics.

What does red-team-tactics do?

It lays out adversary simulation phases based on MITRE ATT&CK, covering reconnaissance, access, evasion, and movement between systems. It also gives a structure for reporting test results.

What scope limits does red-team-tactics describe?

Keep actions within the agreed scope and minimize impact. The guidance says not to go beyond proof of concept.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set495

The whole set →
initref Builds reference docs about how the project is implemented into a /ref directory and links them from CLAUDE.md. 186installs file-uploads A Claude skill that guides the agent through file uploads and cloud storage: S3, Cloudflare R2, presigned URLs, multipart transfers and image optimization. 185installs code-permutation-tester Runs several implementation approaches through simulation and scored quality gates so you pick one before writing the real code. 184installs git-pushing Stages your edits, writes a conventional commit and sends the branch upstream. Handy at the point where a feature is done and you want it published. 183installs digital-twin-creator Walks the agent through mapping, calibration and scenario testing to produce a digital twin of a process or system. 176installs pac-configure Sets up a Product as Code structure: .pac/ directory, config, epic and ticket templates. Useful when product work lives in the same repo as code. 176installs jira This skill lets Claude Code work with Jira issues through the Jira CLI or Atlassian MCP. Use it to inspect tickets, check a sprint, or prepare an issue update. 175installs neon-instagres This skill creates a Neon PostgreSQL database and writes connection settings to an environment file. Use it when a project needs a development database. 173installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor