blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
4
claude
red-team-operations
Adversary simulation planning for authorized red and purple team engagements: rules of engagement, MITRE ATT&CK mapping, and detection validation.
/
Plugin red-team-operations from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (2)
adversary-emulationMethodology for threat-intelligence-based adversary emulation within written rules of engagement: lifecycle, TIBER-EU and MITRE emulation plans, safety controls, phased scenarios, and atomic testing with benign indicators. Use when designing an authorized emulation or purple team exercise.
mitre-attack-frameworkMITRE ATT&CK Enterprise reference: tactics, key techniques with procedures, data sources, detection guidance, and mitigations. Use when mapping behavior to technique IDs, building detections, or planning authorized emulation.
Slash commands (2)
/red-team-operations:attack-mapMap a threat actor or intel report to MITRE ATT&CK techniques and generate a detection validation checklist, optionally with Sigma stubs, Atomic Red Team test IDs, or an ATT&CK Navigator layer.
/red-team-operations:red-team-planCreate an adversary simulation plan for an authorized engagement: threat scenario, scope, rules of engagement, safety controls, and phased operations, optionally as a purple team exercise.
Subagents (2)
red-team-leadUse this agent when planning an authorized red team or purple team engagement: threat-informed scenarios, rules of engagement, deconfliction and emergency stop procedures, phased operations mapped to MITRE ATT&CK, and reporting that drives defensive fixes. It stops to confirm written authorization b
ttp-researcherUse this agent when mapping threat actor behavior to MITRE ATT&CK for defense: building adversary profiles from public threat intelligence, identifying required data sources, and pairing each technique with detection logic and Atomic Red Team validation tests. It separates observed TTPs from assesse
More from HermeticOrmus/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
4
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
4
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
4
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
4
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
4
Similar plugins
engineering-skills
claude32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security, incident-response, red-team, threat-detection. v2.8.1 audits senior-fullstack / senior-frontend / senior-backend against karpathy-coder + Matt Pocock — each ships a 7-question forcing-question library, 4 customization profiles (JSON), deterministic decision engine, composition map into POWERFUL specialists, plus cs-fullstack-engineer / cs-frontend-engineer / cs-backend-engineer orchestrator agents (context: fork) + /cs-fullstack-review, /cs-frontend-review, /cs-backend-review, /cs-engineer-grill slash commands.
35 skills · hooks
alirezarezvani/claude-skills 29,725
claude-bughunter
claude83-skill bug-hunting & external red-team bundle — 58 hunt-* web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, Burp MCP integration. Skills auto-load by topic; 15 slash commands.
83 skills · 15 commands
elementalsouls/Claude-BugHunter 5,641
Pentest AI Agents
claude52 specialist subagents for authorized penetration testing and red team engagements.
0xSteph/pentest-ai-agents 2,439
pm-simulators
claudeAdversarial roleplay: simulate the specific hostile reader you fear — opposing counsel attacking your contract, the VC partner meeting after you leave the room, a consumer-protection investigator reading your claims, the customer who quietly churns, and the acquirer's red team chipping your price. Each produces the adversary's real artifact plus an out-of-character debrief with fixes.
21 skills
mohitagw15856/pm-claude-skills 1,544
money-review-skeptic
claudeDevil's advocate review. Seven attack vectors, top-3 risk ranking, and the single avoided question the user has been polite about. Verdict modes: EXISTENTIAL RISK / SOLVABLE RISKS / LOW-RISK / WRONG QUESTION.
25 skills
iamzifei/show-me-the-money 1,140
Produces an adversarial attack on a legal argument that survives reply. Runs the opposing-counsel discipline twice: an unrestrained first pass, then the same instrument turned on that pass to cut every point that collapses under challenge - attacks on facts your own side has conceded, objections belonging to the wrong forum, speculation about documents and motives, gotchas with innocent explanations, overclaims, self-refuting assertions, and padding. The deliverable is one standalone attack containing only what can be defended, capped at five heads, not a discussion of the discarded draft. Use to attack, stress-test, red-team or rebut a submission, brief, motion, witness statement, letter or piece of structured legal reasoning when the output must be something you could stand up and say. Also use when an earlier adversarial review came back overlong, scattershot or padded with points you do not trust. Derived from Opposing Counsel Review by Larissa Meredith-Flister (Apache-2.0). Formal British English.
200 skills
lawve-ai/awesome-legal-skills 949
Maintain red-team-operations?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins