attack-pattern-explore
100 / 100 · Low risk
Fine to try.
Drive a self-directed survey of a BloodHound Enterprise deployment using the curated attack-pattern catalog. Walks the canonical AD / Azure / PKI patterns (Kerberoasting, unconstrained delegation, ADCS ESC1-15, ACL abuses, SID history, etc.) and surfaces concrete findings with evidence. Use when the caller asks "go find interesting things", "self-audit this deployment", "what's exploitable here", or when the analyst is dropped into an unfamiliar tenant and needs orientation.
What this skill can do
We found nothing in the files we read that matches our rules. That does not prove the skill is safe: see the limits of static scanning.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'attack-pattern-explore' ] || [ -L ~/.agents/skills/'attack-pattern-explore' ]; then echo 'A skill folder named attack-pattern-explore already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/dreadnode/capabilities' "$d" && git -C "$d" checkout --quiet '3ceeb34c0c33dc36738cf0d4ec86e38b53d98216' -- 'capabilities/bloodhound-enterprise/skills/attack-pattern-explore' && mkdir -p ~/.agents/skills && cp -R "$d"/'capabilities/bloodhound-enterprise/skills/attack-pattern-explore' ~/.agents/skills/'attack-pattern-explore' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'attack-pattern-explore' ~/.claude/skills/'attack-pattern-explore' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/dreadnode/capabilities/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-11 | 3ceeb34 | 100 |