claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
The meta-skill that builds and improves all your skills, including itself. Watches your work sessions (autonomous or human-led), captures patterns, corrections and judgement calls, and turns them into skill improvements and new skill candidates for your review. Practical application of the Augmented Expertise methodology. Open source: CC BY 4.0.
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
Folder structure as agent architecture. ICM replaces framework-level orchestration with filesystem structure.
Everything for pentest. | 渗透测试知识库,以 AI Agent 可执行的格式沉淀安全方法论。
Prompt Driven Development (PDD): The Last Programming Language™. Prompt files are source; code is generated output.
Collection of methodology and test case for various web vulnerabilities.
Qiushi-Skill: Build agents that investigate first, focus on the main contradiction, validate in practice, and keep pushing until the work is actually done. 求是Skill——从经典唯物辩证法与实践哲学中提炼出一条总原则和九大方法论工具武装AI大脑。
Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with per-technique OPSEC/telemetry notes. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.
financial-data-governance methodology
Methodology, links, tools for OSINT in different countries
聂·基层运行逻辑 · Agent Skill:基于聂辉华《基层中国的运行逻辑》的方法论工具箱(不含原书全文)
Research pipelines as semantic execution units: each skill declares inputs/outputs, acceptance criteria, and guardrails. Evidence-first methodology prevents hollow writing through structured intermediate artifacts.
Architectural methodology for frontend projects
The Art of Debugging Open Book
Chiaro's SOC 2 methodology for readiness and audit. Controls, criteria, evidence standards and worked judgment calls, published so you can check it.
AI agent skills for thinking clearly, making better decisions, and getting things done. Strategy, research, decision-making, planning, risk management, negotiation, execution, strategic thinking, BMAD-METHOD elicitation, reasoning, business strategy, market research, competitive intelligence, forecasting, scenario planning, problem solving, priorit
An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.
These patterns document how to apply open source principles and practices for software development within the confines of an organization - aka InnerSource.
VUnit is a unit testing framework for VHDL/SystemVerilog
Collective Knowledge (CK), Collective Mind (CM/CMX) and MLPerf automations: community-driven projects to learn how to run AI, ML, and other emerging workloads more efficiently and cost-effectively across diverse models, datasets, software, and hardware using MLPerf methodology and benchmarks.
bkit Vibecoding Kit - PDCA methodology + Claude Code mastery for AI-native development
带 AI 精读大型开源仓库的方法论:四阶段流程、可复用模板、28 条踩坑清单,核心是让每个技术论断都可回溯到源码具体行
Scan-to-Practice: a field-tested AI skill and methodology for turning scanned learning materials into structured practice products.
The open-source SEO + GEO/AEO playbook: tested scripts, guardrails and methodology behind a site that reached 11.08M impressions / 44.8K clicks in 90 days. Human-vs-AI-agent query analysis, matched-control measurement, evidence-verified facts.
Evidence-based audit methodology and read-only Laravel context tools for existing AI coding agents.
—
DSH plugin: pixel-to-text image reading for text-only models. image_scan/image_ocr/image_sample tools + image-reading skill (34-image trained methodology). Pure local, optional PaddleOCR.
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits early.
Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.
DeepSeek Harness plugin: 15 obra/superpowers engineering skills, bilingual descriptions, per-skill toggles | DeepSeek Harness 插件:15 个 obra/superpowers 工程纪律技能,技能描述中英双语自由切换,每一个技能本身自由开关
Industry and company research domain pack for DeepSeek Harness: methodology skills, industry chain mapping, public-source policy/news tracking, company research cards, and auditable research reports. Research only - not investment advice.
Evaluate GitHub projects from an outside contributor's perspective. An agent skill with a read-only collector and evidence-based methodology.
Synthesis engine for buy-side healthcare equity research.
面向 VC/PE 投资人的 AI 调研工作体系:7 步流水线 × 三方案(A 企业 / B 行业技术 / C 混合)+ 9 项执行规范 + 8 套模板 + 工具脚本 + 5 个真实案例与长期记忆库,让「看公司、看行业、看赛道」从凭经验变成按流程