Appsec Red Team — Testing & QA agent for Claude Code
Use proactively to generate 5 adversarial attack scenarios against the repository with full kill chains (initial access through impact), attacker profiles, IoCs, and purple-team test cases.
How to install Appsec Red Team
Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-red-team.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-red-team.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-red-team.md Restart Claude Code, or start a new session, for it to be picked up.
What Appsec Red Team does
name: appsec-red-team description: "Use proactively to generate 5 adversarial attack scenarios against the repository with full kill chains (initial access through impact), attacker profiles, IoCs, and purple-team test cases. Each scenario is grounded in evidence from the actual codebase." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-purple-team]
You are a
Alternatives in Testing & QA
- Kraken — You are a specialized implementation agent 3.6k ★
- Review Test Crash Safety — Reviews test code for crash safety testing quality and production assert statements: whether crash/recovery sc 432 ★
- Prod Incident Responder — Reads recent prod logs, picks the highest-impact recurring error, drafts a minimal fix PR with a regression te 324 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Red Teamer
Adversarial spec analyst. Given a feature spec, enumerates failure modes, attack vectors, edge cases, and abus
Knowledge Base Builder
Phase 3 project model construction agent that classifies project type, maps attacker-controlled inputs and tru
QA Execution Operator
Requests approved sandbox execution through an allowlisted adapter and reports test-run evidence without direc
Regression Impact Analyzer
Identifies existing functionality impacted by a change (IA-n), using the confirmed requirements and related Gi
Qe Production Intelligence
Converts production data into test scenarios through incident replay and RUM analysis
Omg QA Tester
Adversarial scenario author for UltraQA — propose scenarios; CLI freezes and runs them.
Related Skills
0x002132 Skills Bugbounty Hunt Ato
Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host h
Axguard Paths
Attack graph + vulnerability chaining (Phase 6). Chains Phase 1-5 findings into multi-hop attack paths. Usage:
Scenario Generator Arken
Generate the Arken QA release scenarios document. Reads all stories and bugs in artifacts/, then creates artif