Thinking Red Team
Thinking Red Team is an agent skill (a SKILL.md file) from tjboudreaux/cc-thinking-skills. For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a… It works with Claude Code, Codex, Cursor and GitHub Copilot and has 1,674 GitHub stars across a repository of 2 listed skills.
github.com/tjboudreaux/cc-thinking-skills/skills/thinking-red-team (opens in a new tab)
Data as of from the GitHub API; description from the skill's SKILL.md. Report an error
Add this skill
Claude
This repository is a Claude Code plugin marketplace. In Claude Code:
/plugin marketplace add tjboudreaux/cc-thinking-skills
/plugin install thinking-skills@thinking-skills-marketplaceIn the Claude apps, zip the thinking-red-team folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/tjboudreaux/cc-thinking-skills.git
cp -r cc-thinking-skills/skills/thinking-red-team .agents/skills/thinking-red-team # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/tjboudreaux/cc-thinking-skills.git
cp -r cc-thinking-skills/skills/thinking-red-team .cursor/skills/thinking-red-team # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), code.claude.com/docs/en/plugin-marketplaces (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation. Adversarial security review of systems you are authorized to assess. Attack before an outsider does, but report only what you can actually break: every finding needs a concrete exploit path and a check that the proposed fix closes it.
More skills in tjboudreaux/cc-thinking-skills
2 skills are listed from this repository.
Similar skills
More security skills
Integrate Harness
a5c-ai/babysitter
Use when adding a new agent harness (CLI-based coding agent) adapter to adapters.
Active · last commit Aug 31, 2026
SecurityJavaScriptFootgun Scan
maxrave-dev/kotlin-footguns
Scan a Kotlin or Compose Multiplatform diff for known footgun shapes and open the matching trap to confirm each hit.
Too new to judge · created Aug 20, 2026
SecurityPythonEinhorn Forensic Short
questflowai/investorskills
Use when evaluating David Einhorn-style forensic shorts and longs: accounting red flags, governance problems, capital allocation failures, and evidence-based short theses.
Maintained · last commit Aug 21, 2026
SecuritySwiftEntra App Registration
microsoft/azure-skills
Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.
Active · last commit Oct 23, 2026
OfficialSecurityShellFastify Best Practices
mcollina/skills
Guides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript.
Maintained · last commit Oct 18, 2026
SecurityTypeScriptAgentlas Security Scan
agentlas-ai/Agentlas-OS
Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when asked to run/interpret hephaestus…
Active · last commit Oct 24, 2026
SecurityPython
How do I install the Thinking Red Team skill?
In Claude Code, run /plugin marketplace add tjboudreaux/cc-thinking-skills and then /plugin install thinking-skills@thinking-skills-marketplace. For Codex or Cursor, copy the thinking-red-team folder into .agents/skills/ or .cursor/skills/.
Is the Thinking Red Team skill free?
Yes. The repository is open source under the MIT license.
Is Thinking Red Team maintained?
The repository's most recent commit was on Aug 7, 2026. Its latest release is v1.0.0. appsgit only lists skills from repositories with a commit in the last six months.