Red-team OPSEC discipline
Guides an agent through stealthy red-team tactics: IP-ban bypass, scan pacing, traffic blending, anti-forensics.
- Repository
- AIPentest/CyberStrikeAI
- Stars
- 8,323
- Licence
- Apache-2.0
- Files
- 1 file
What it does
This skill is a set of written operational-security rules in Chinese that tells an AI agent how to stay hidden while testing a target's defenses. Once installed, when a user asks about being blocked, slowing scans, or covering traces, the agent will suggest tactics such as spoofing X-Forwarded-For headers to get past IP blacklists, throttling and randomizing scan timing, mimicking normal browser traffic, running tools in memory, and deleting shell history and log entries. It is advice only; the file contains no executable code.
Great for
- Authorized penetration testers running a covert engagement against a client who has agreed to the test
- Red-team operators who need a checklist for evading WAF, IDS, or EDR detection during sanctioned exercises
Skip it if
- Anyone testing systems without written authorization, since the tactics (log tampering, evading detection, bypassing bans) are aimed at avoiding accountability and can be illegal
- Defenders or students looking for detection and hardening guidance, because the file only describes attacker-side evasion
Try asking
- “My IP got banned by the target's WAF during an authorized test, how can I get back in stealthily?”
- “Plan a low-and-slow scan of this client's external perimeter that stays under IDS alert thresholds”
- “How should I clean up shell history and logs after my engagement without triggering audit alerts?”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.
redteam-opsec.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip redteam-opsec.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip redteam-opsec.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- State the engagement scope and authorization in your request so the agent's advice stays tied to a sanctioned test
- Ask for the detection-risk reasoning behind each step, since the skill itself is terse and mostly a list of tactics
- Pair with a separate defensive or reporting skill if you need documentation of what was evaded for the client
What's inside
- SKILL.md
Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.