Tessl • The management layer for AI agent skills

SkillPublic

offensive-netexec

Use this skill whenever the user asks about NetExec (nxc) — a network exploitation and post-exploitation tool for Active Directory environments. Triggers include: any mention of 'nxc', 'netexec', 'crackmapexec' successor questions, AD enumeration, SMB/LDAP/WinRM/MSSQL/SSH/RDP/VNC/WMI/FTP/NFS protocol attacks, password spraying, credential dumping (SAM, NTDS, LSASS, DPAPI), Kerberoasting, ASREPRoasting, lateral movement, BloodHound collection, module usage, or any pentest workflow involving Windows domain environments. This skill covers ALL protocols, ALL modules, and ALL core features of NetExec. Always provide full command examples with correct flags and options.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

72%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-organized command reference that assumes Claude's competence and avoids concept over-explanation. Its main weaknesses are the absence of file-based progressive disclosure (everything inlined) and missing validation/feedback checkpoints in the destructive chained workflows.

Suggestions

Split the per-protocol sections and the large credential-dumping/vuln-module catalogs into reference files (e.g. references/smb.md, references/modules.md) and link to them from SKILL.md, keeping only global syntax + a quick-start overview inline.

Add explicit validation checkpoints to the chained scenario workflows — e.g. after spraying verify which creds succeeded before lateral movement, and after an NTDS/LSASS dump confirm output before reuse — to satisfy the destructive-ops feedback-loop requirement.

Remove or trim the trailing 'Quick Reference: Flag Cheatsheet' since it duplicates flags already shown in the per-protocol sections, or move it into a separate quick-ref file.

Dimension	Reasoning	Score
Conciseness	Almost entirely lean command listings and flag tables with no basic-concept over-explanation, but the trailing 'Quick Reference: Flag Cheatsheet' re-lists flags already documented above, adding mild redundancy to an already long body.	4 / 5
Actionability	Fully executable, copy-paste-ready commands across all protocols and modules with real flags, real module names, and concrete examples covering the common cases.	5 / 5
Workflow Clarity	The 'Pentest Scenario' workflows are clearly numbered and sequenced, but destructive/batch operations (NTDS dump, hash spraying, lateral movement) lack explicit validate→fix→retry feedback loops, capping this dimension at 3 per the rubric.	3 / 5
Progressive Disclosure	Section organization by protocol is good, but no bundle files exist and all per-protocol and module-catalog reference material is inlined into one ~840-line SKILL.md with zero pointers to separate reference files.	3 / 5
	Total	15 / 20 Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: concrete capabilities, comprehensive natural trigger terms including synonyms, and explicit what/when guidance tied to a distinct tool niche. No first/second-person voice issues — it follows the accepted 'Use this skill whenever…' imperative pattern.

Dimension	Reasoning	Score
Specificity	Names the domain (NetExec, AD network/post-exploitation) and lists multiple concrete actions — 'AD enumeration, password spraying, credential dumping (SAM, NTDS, LSASS, DPAPI), Kerberoasting, ASREPRoasting, lateral movement, BloodHound collection, module usage' — for comprehensive coverage.	5 / 5
Completeness	Explicitly answers both what ('network exploitation and post-exploitation tool… covers ALL protocols, ALL modules') and when ('Use this skill whenever the user asks about…', 'Triggers include:…') with concrete trigger phrases.	5 / 5
Trigger Term Quality	Comprehensive natural terms with synonyms users actually say — 'nxc', 'netexec', 'crackmapexec' successor — plus protocol names and attack names (Kerberoasting, ASREPRoasting, BloodHound).	5 / 5
Distinctiveness Conflict Risk	Tool-specific niche (NetExec/nxc) with distinct, unambiguous triggers; minimal overlap risk with other skills.	5 / 5
	Total	20 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
skill_md_line_count	SKILL.md is long (856 lines); consider splitting into references/ and linking	Warning

	Total	15 / 16 Passed

Repository: SnailSploit/Claude-Red
Path: Skills/active-directory/offensive-netexec/SKILL.md
Revision: a8de813

Reviewed: 30 days ago

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.

offensive-netexec

Table of Contents

Is this your skill?