Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
danielmiessler avatar

Redteam

  • 156 installs
  • 17.2k repo stars
  • Updated August 1, 2026
  • danielmiessler/personal_ai_infrastructure

Adversarially probe agents, prompts, and integrations for jailbreaks, data leaks, tool abuse, and unsafe completions before production exposure.

About

The redteam skill in danielmiessler/personal_ai_infrastructure guides adversarial testing of Personal AI Infrastructure: crafting attack prompts, simulating malicious tool use, evaluating guardrail failures, prioritizing fixes, and documenting residual risk before launching agents that touch sensitive data or external systems.

  • Prompt injection and jailbreak suites
  • Tool permission abuse scenarios
  • Data exfiltration test cases
  • Mitigation and severity triage
  • PAI-aligned adversarial playbooks

Redteam by the numbers

  • 156 all-time installs (skills.sh)
  • Ranked #876 of 2,203 Security skills by installs in the Skillselion catalog
  • Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/danielmiessler/personal_ai_infrastructure --skill redteam

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs156
repo stars17.2k
Last updatedAugust 1, 2026
Repositorydanielmiessler/personal_ai_infrastructure

What it does

Adversarially probe agents, prompts, and integrations for jailbreaks, data leaks, tool abuse, and unsafe completions before production exposure.

Files

SKILL.mdMarkdownGitHub ↗

Customization

Before executing, check for user customizations at: ~/.claude/PAI/USER/SKILLCUSTOMIZATIONS/RedTeam/

If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.

🚨 MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)

You MUST send this notification BEFORE doing anything else when this skill is invoked.

1. Send voice notification:

   curl -s -X POST http://localhost:31337/notify \
     -H "Content-Type: application/json" \
     -d '{"message": "Running the WORKFLOWNAME workflow in the RedTeam skill to ACTION"}' \
     > /dev/null 2>&1 &

2. Output text notification:

   Running the **WorkflowName** workflow in the **RedTeam** skill to ACTION...

This is not optional. Execute this curl command immediately upon skill invocation.

RedTeam Skill

Military-grade adversarial analysis using parallel agent deployment. Breaks arguments into atomic components, attacks from 32 expert perspectives (engineers, architects, pentesters, interns), synthesizes findings, and produces devastating counter-arguments with steelman representations.

Workflow Routing

Route to the appropriate workflow based on the request.

When executing a workflow, output this notification directly:

Running the **WorkflowName** workflow in the **RedTeam** skill to ACTION...
TriggerWorkflow
Red team analysis (stress-test existing content)Workflows/ParallelAnalysis.md
Adversarial validation (produce new content via competition)Workflows/AdversarialValidation.md

---

Quick Reference

WorkflowPurposeOutput
ParallelAnalysisStress-test existing contentSteelman + Counter-argument (8-points each)
AdversarialValidationProduce new content via competitionSynthesized solution from competing proposals

The Five-Phase Protocol (ParallelAnalysis): 1. Decomposition - Break into 24 atomic claims 2. Parallel Analysis - 32 agents examine strengths AND weaknesses 3. Synthesis - Identify convergent insights 4. Steelman - Strongest version of the argument 5. Counter-Argument - Strongest rebuttal

---

Context Files

  • Philosophy.md - Core philosophy, success criteria, agent types
  • Integration.md - Skill integration, FirstPrinciples usage, output format

---

Examples

Attack an architecture proposal:

User: "red team this microservices migration plan"
--> Workflows/ParallelAnalysis.md
--> Returns steelman + devastating counter-argument (8 points each)

Devil's advocate on a business decision:

User: "poke holes in my plan to raise prices 20%"
--> Workflows/ParallelAnalysis.md
--> Surfaces the ONE core issue that could collapse the plan

Adversarial validation for content:

User: "battle of bots - which approach is better for this feature?"
--> Workflows/AdversarialValidation.md
--> Synthesizes best solution from competing ideas

---

Last Updated: 2025-12-20

Gotchas

  • RedTeam is for attacking IDEAS, not systems. This skill finds flaws in arguments, strategies, and plans — not network vulnerabilities.
  • 32 adversarial agents generate volume — not all findings are equal. Rank by severity, discard noise.
  • The goal is to strengthen, not destroy. Present weaknesses constructively with remediation paths.

Execution Log

After completing any workflow, append a single JSONL entry:

echo '{"ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","skill":"RedTeam","workflow":"WORKFLOW_USED","input":"8_WORD_SUMMARY","status":"ok|error","duration_s":SECONDS}' >> ~/.claude/PAI/MEMORY/SKILLS/execution.jsonl

Replace WORKFLOW_USED with the workflow executed, 8_WORD_SUMMARY with a brief input description, and SECONDS with approximate wall-clock time. Log status: "error" if the workflow failed.

Related skills

Securityappsecaudit

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.