Container Escape — Testing skill for Claude Code
Test container escape vectors on: $ARGUMENTS.
How to install Container Escape
Installs to ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-container-escape.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h3nr1-d14z/ai-redteam-toolkit/HEAD/.claude/commands/container-escape.md -o ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-container-escape.md Restart Claude Code, or start a new session, for it to be picked up.
What Container Escape does
Test container escape vectors on: $ARGUMENTS
- Container info: Identify runtime (Docker/containerd/CRI-O), check cgroup version, namespace isolation
- Privileged check: Test if container is privileged (--privileged), has dangerous capabilities (SYS_ADMIN, SYS_PTRACE, DAC_OVERRIDE)
- Mount check: Look for mounted Docker socket (/var/run/docker.sock), host filesystem mounts, sensitive procfs/sysfs
- Kernel exploits: Check kernel version for known container escapes (CVE-2022-01
Alternatives in Testing
- Webapp Testing — Test local web applications using Playwright for UI verification and debugging 94.1k ★
- #29 — #52, #103) 92.5k ★
- /test Routing — Vérifie le routing de commandes RTK sans exécution (dry-run) 25.5k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
FileMaker AI Grammar
171 engine-measured test vectors and 29 verified behaviour rules for FileMaker's calculation engine, round-tri
Grid Tester
Use the @grid-tester agent for test strategy, TDD, or flaky test diagnosis: $ARGUMENTS
AI Guardrail Test
Test AI guardrails and safety measures on: $ARGUMENTS
Multipov Tests
Run a multi-agent test-focused review on $ARGUMENTS (default: test files touched in the current branch) via th
Vt Compliance
VT compliance testing -- run escape sequence tests against teru's VtParser, validate CSI/SGR/OSC/DCS handling,
Claudemd Status
Show claudemd plugin version, installed spec version, kill-switch state, and rule-hits summary. Pass --verbose
Related Agents
Cloud Attacker
Cloud penetration testing specialist for AWS, Azure, and GCP. Handles IAM enumeration, privilege escalation, S
Container Breakout
Delegates to this agent when the user asks about container escape, Docker breakout, Kubernetes pod escape, run
Aidd Escape Analyst
Analyzes a defect that escaped to production — which verification layer should have caught it, why it did not,