Skip to content
appsgit

Offensive Container Escape

Offensive Container Escape is an agent skill (a SKILL.md file) from SnailSploit/Claude-Red. Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. It works with Claude Code and has 9,199 GitHub stars across a repository of 4 listed skills.

github.com/SnailSploit/Claude-Red/Skills/container/offensive-container-escape (opens in a new tab)

Data as of from the GitHub API; description from the skill's SKILL.md. Report an error

View on GitHub (opens in a new tab)

Add this skill

Claude

Claude Code loads skills from ~/.claude/skills/ (all projects) or .claude/skills/ (one project):

git clone --depth 1 https://github.com/SnailSploit/Claude-Red.git
cp -r Claude-Red/Skills/container/offensive-container-escape ~/.claude/skills/offensive-container-escape   # personal, or .claude/skills in a project

In the Claude apps, zip the offensive-container-escape folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).

ChatGPT / Codex

Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:

git clone --depth 1 https://github.com/SnailSploit/Claude-Red.git
cp -r Claude-Red/Skills/container/offensive-container-escape .agents/skills/offensive-container-escape   # repo; ~/.agents/skills for all projects

Standalone skills also load in the ChatGPT desktop app.

Cursor

Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:

git clone --depth 1 https://github.com/SnailSploit/Claude-Red.git
cp -r Claude-Red/Skills/container/offensive-container-escape .cursor/skills/offensive-container-escape   # project; ~/.cursor/skills for all projects

Source (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)

What this skill does

Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem mount and nsenter, Docker socket abuse through /var/run/docker.sock, Linux capability exploitation including CAPSYSADMIN, CAPSYSPTRACE, and CAPNETADMIN, cgroup v1 notifyonrelease escape, runc CVEs such as CVE-2019-5736 and CVE-2024-21626 Leaky Vessels, kernel exploits from within containers, and Dockerfile misconfigurations like --privileged and…

When it triggers

  • Use this skill when the engagement scope includes container breakout, Docker escape, container privilege escalation, host access from container, or when you land inside a containerized environment and need to reach the underlying host.

More skills in SnailSploit/Claude-Red

4 skills are listed from this repository.

Similar skills

More devops & cloud skills

All DevOps & cloud

FAQ

Offensive Container Escape FAQ

Still curious? Email info@appsgit.com.

How do I install the Offensive Container Escape skill?

Copy the offensive-container-escape folder (the one containing SKILL.md) into ~/.claude/skills/ for Claude Code, .agents/skills/ for Codex or .cursor/skills/ for Cursor. The agent picks it up automatically when a task matches its description.

Is the Offensive Container Escape skill free?

Yes. The repository is open source under the MIT license.

Is Offensive Container Escape maintained?

The repository's most recent commit was on Oct 12, 2026. Its latest release is v0.3.0. appsgit only lists skills from repositories with a commit in the last six months.