对进入系统的文件或 URL 执行安全与合规扫描,输出 pass/reject 判定与扫描报告,作为所有文档处理的强制前置关卡。
Claude Red
Claude Red is an open-source security skill for Claude Code and compatible agents, published by SnailSploit. Its author describes it as: “claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surfa…”. The project has 2.8k stars on GitHub and is available under the MIT license. Add it to your setup with `git clone https://github.com/SnailSploit/Claude-Red ~/.claude/skills/Claude-Red`.
Installation
Add Claude Red to your agent with:
git clone https://github.com/SnailSploit/Claude-Red ~/.claude/skills/Claude-Red Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
When to use it
Reach for Claude Red when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear MIT license — safe to read and adapt
- Established project with 2,797 GitHub stars
- Actively maintained (recent commits)
Topics
Frequently asked questions
- What does Claude Red do?
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
- How do I install Claude Red?
- Run git clone https://github.com/SnailSploit/Claude-Red ~/.claude/skills/Claude-Red in your agent, then reload your skills. Review the source at https://github.com/SnailSploit/Claude-Red before installing.
- Is Claude Red free to use?
- Yes. Claude Red is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
Related skills
More Security →State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.
/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.
Audits and designs iOS/macOS/watchOS/visionOS interfaces against the Apple Human Interface Guidelines, including the Liquid Glass design language (announced WWDC25, shipped with iOS 26/macOS Tahoe, Sept 2025). Use when reviewing an Apple-platform mockup or app for HIG compliance, checking contrast or tap-target sizes, or designing native-feeling Apple UI (e.g., 'audit my iOS app against the HIG', 'is this text readable on Liquid Glass?').