A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
SOTA Skills
SOTA Skills is an open-source security skill for Claude Code, published by martinholovsky. Its author describes it as: “State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.”. The project has 8 stars on GitHub and is available under the Creative Commons Attribution 4.0 International license. Add it to your setup with `git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skills`.
Installation
Add SOTA Skills to your agent with:
git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skillsAlways review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
When to use it
Reach for SOTA Skills when you want security help from Claude Code without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear Creative Commons Attribution 4.0 International license — safe to read and adapt
- Declares compatibility with Claude Code
- Actively maintained (recent commits)
Things to check
- Limited adoption so far — evaluate before depending on it
Topics
Related skills
More Security →A documentation library for governance, risk, compliance, cybersecurity, privacy, resilience, AI assurance, and operational control practices + a Claude Code rules-and-skills pack distilled from maintaining it.
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows