Enterprise DNAEnterprise DNA

Skills

offensive-data-exfiltration

by SnailSploit

claude-red is a curated library of offensive security skills designed for the Claude skills system.

Our verdict

Not reviewed yet

We have not reviewed offensive-data-exfiltration yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About offensive-data-exfiltration

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

Notes

9,342 stars on GitHub. Last updated 2026-10-12. Licensed MIT.

Indexed from github-skill-repos. Verified against the live GitHub repo.

Key facts

What we have checked

Not checked yet. Dated facts such as prices, releases and repository activity appear here once we have confirmed them from a source.

Health and security

Is offensive-data-exfiltration looked after, and what do its setup files show

Security check static checks

62 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked by edna-skill-static-v1 main@a8de813edc9f. What it checks

  • High Sends data to a host outside the well-known APIs (a paste, tunnel or request-catcher host), host pastebin.com: Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 139.
  • Medium Reads or points the agent at stored credentials (a keychain dump, browser password or cookie store, crypto wallet or system password file): Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 36, 2 places in all.
  • Low Sends data to a host outside the well-known APIs, host collector: Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 415.
  • Note No dependency list or install command was found in the skill, so there were no packages to look up on OSV.

Sources

Where this comes from

No sources recorded yet. Each source we check is listed here with the date we checked it.

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

  1. Security finding

    Source: GitHub

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.