CtrlK
BlogDocsLog inGet started
Tessl Logo

redteam-opsec

OPSEC隐蔽作战纪律:IP黑名单绕过,速率时序,流量混淆,最小足迹,反取证,渐进暴露。Use when maintaining stealth, bypassing IP bans, or planning covert red-team ops.

60

Quality

71%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./skills/redteam-opsec/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

65%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A token-dense, actionable OPSEC cheat-sheet with embedded commands and a sensible escalation sequence. Its main weaknesses are the monolithic single-block presentation and the absence of explicit validation/feedback loops for batch and scanning operations.

Suggestions

Add an explicit validate→fix→retry loop for batch scanning operations (e.g. scan → check for ban/IDS alert → adjust rate/jitter → resume) to lift workflow clarity above the destructive/batch cap.

Break the monolithic code block into headed markdown sections (IP ban bypass, Rate & timing, Traffic obfuscation, Minimal footprint, Anti-forensics, Progressive escalation) so the overview is navigable, and move extended technique catalogs into reference files.

For each embedded command, give a one-line copy-paste-ready form with concrete flags rather than parenthetical hints.

DimensionReasoningScore

Conciseness

The dense cheat-sheet packs concrete specifics with almost no explanatory padding about what OPSEC is, assuming Claude's competence; the single monolithic code block is efficient but slightly harder to scan than structured prose.

4 / 5

Actionability

Concrete, executable tokens are embedded throughout ('X-Forwarded-For', 'nuclei -rl', 'nmap -T2 --max-rate', 'ffuf -p', 'unset HISTFILE', 'touch -r', '/dev/shm') plus a verification procedure for IP-ban bypass, with only minor gaps in fully copy-paste-ready form.

4 / 5

Workflow Clarity

The '渐进暴露' section gives a real escalation sequence (passive recon → confirm no monitoring → active scan → exploitation) and an IP-bypass verification pattern, but batch/scanning operations lack an explicit validate→fix→retry feedback loop, so the destructive/batch cap at 3 applies.

3 / 5

Progressive Disclosure

Content is organized into labeled discipline categories inside a single code block, but there are no real section headers or navigation, and material that could live in reference files (technique catalogs) is inlined into one monolithic block.

3 / 5

Total

14

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A focused, well-targeted description that names concrete capability areas and pairs them with explicit natural-language triggers. It clearly answers both 'what' and 'when' with minimal conflict risk.

Suggestions

Add a couple of natural trigger synonyms (e.g. 'evading detection', 'staying undetected during engagements') to broaden when-clause coverage.

Reframe the discipline labels as actions (e.g. 'bypass IP blacklists, throttle scan timing, obfuscate traffic') to lift specificity from category-naming to concrete verbs.

DimensionReasoningScore

Specificity

Lists several concrete capability areas ('IP黑名单绕过,速率时序,流量混淆,最小足迹,反取证,渐进暴露') rather than vague abstractions, though they read as category labels rather than fully fleshed actions, leaving minor coverage gaps.

4 / 5

Completeness

Both 'what' (the six OPSEC disciplines) and 'when' (the 'Use when...' clause) are present and explicit; the 'when' could be slightly more comprehensive with additional concrete trigger scenarios.

4 / 5

Trigger Term Quality

Natural trigger phrases 'maintaining stealth, bypassing IP bans, planning covert red-team ops' map well to what a user would say, but a few common synonyms (e.g. 'evading detection', 'staying undetected') are missing.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear niche (red-team OPSEC) with distinctive triggers ('stealth', 'IP bans', 'covert red-team ops') that are unlikely to fire for unrelated skills.

5 / 5

Total

17

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository
Ed1s0nZ/CyberStrikeAI
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.