breach

Solid

Designing red team attack scenarios, threat models, MITRE ATT&CK/OWASP application, Purple Team exercises, and AI/LLM red teaming. Use when adversarial security validation is needed.

AI & Automation 72 stars 14 forks Updated today MIT

Install

View on GitHub

Quality Score: 85/100

Stars 20%
62
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

<!-- CAPABILITIES_SUMMARY: - threat_modeling: Design threat models using STRIDE, PASTA, Attack Trees, and MITRE ATT&CK mapping - attack_scenario_design: Create structured attack scenarios with kill chains and exploitation paths - ai_red_teaming: Test AI/LLM systems for prompt injection, jailbreak, data poisoning, RAG poisoning, system prompt leakage, MCP server compromise, agent skill supply chain poisoning, and agentic risks (OWASP LLM Top 10 2025 + Top 10 for Agentic Applications 2026 [ASI01-ASI10] + Agentic Skills Top 10 [AST01-AST10] + MITRE ATLAS monthly release cadence 2025+) - purple_team_exercise: Design collaborative Red/Blue team exercises with detection validation - attack_surface_analysis: Map and prioritize attack surfaces across application, infrastructure, and AI layers - security_control_validation: Verify WAF/IDS/EDR/guardrail effectiveness through simulated bypass attempts - owasp_attack_testing: Apply OWASP Top 10, LLM Top 10 (2025), and Agentic Top 10 (2026) as attack playbooks - adversarial_report: Generate structured findings with CVSS 4.0 severity (Base+Threat+Environmental+Supplemental), exploitability, and remediation guidance COLLABORATION_PATTERNS: - Sentinel → Breach: Static findings inform attack scenario targeting - Probe → Breach: DAST vulnerabilities feed into exploitation chain design - Canon → Breach: Standards gaps become attack entry points - Oracle → Breach: AI/ML architecture provides attack surface for AI red teaming - Matrix → Breach: ...

Details

Author
simota
Repository
simota/agent-skills
Created
7 months ago
Last Updated
today
Language
HTML
License
MIT

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

thinking-red-team

Deliberately attack your own plans, systems, and assumptions to find weaknesses before adversaries or reality does. Use for security review, architecture validation, plan stress-testing, and pre-launch preparation.

2 Updated 2 days ago
babypochi06
AI & Automation Solid

red-team

Attacker's-eye test of LLM/agent defenses: instruction hijacking, data exfiltration and tool abuse through untrusted content; verifies whether the defense actually holds.

22 Updated yesterday
byerlikaya
Code & Development Listed

red-teaming

Adversarial red-teaming skill for code, systems, strategies, and plans. Activates when the user wants their work attacked: finding security holes, edge cases, failure modes, logical flaws, incorrect assumptions, and risks they haven't considered. Different from pre-mortem (which focuses on pre-mortems for plans/proposals) — this skill covers technical systems, code correctness, API contracts, business logic, and strategies by explicitly playing the attacker, the adversarial user, or the skeptical engineer. Surfaces the most dangerous findings first. Use when user says: red team this, find the holes, attack this code, what could an attacker do, find the edge cases, break this, where does this fail, security review, find the bugs, what am I missing, adversarial review, how would you break this API, stress test, abuse cases, find the failure modes, exploit this, what's the worst that could happen, find the vulnerabilities, think like an attacker. Do NOT activate for: requests for improvements or feature suggesti

3 Updated 2 weeks ago
Sandeeprdy1729