Updated 5mo ago
by mukul975
Threatswarm
27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code plugin. Backed by 754 MITRE-mapped skills.
88 GitHub stars (88)
+6 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | +2 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | +2 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | +1 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | +1 |
| Oct 13 | −1 |
| Oct 14 | 0 |
| Oct 15 | +1 |
| Oct 16 | 0 |
- 5 skills (5 skills found in its SKILL.md files)
- 25 forks (25 forks)
- 5mo ago last update (Last updated 5mo ago)
Install
Skills CLI
npx skills add mukul975/Threatswarm
Asks which skills and agents to install. Just one: npx skills add mukul975/Threatswarm --skill ad-attacks — add -g for every project.
Claude Code
git clone https://github.com/mukul975/Threatswarmcp -r "Threatswarm/.claude/skills/ad-attacks" ~/.claude/skills/
Copies the ad-attacks skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add mukul975/Threatswarm
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
ad-attacks
Active Directory attack reference — BloodHound Cypher queries, Kerberos attack decision tree, ACE/ACL abuse, ADCS ESC1-8, and AD misconfig checklist
.claude/skills/ad-attacks/SKILL.md on GitHub (opens in a new tab) -
exploit-db
Exploit-DB and searchsploit reference — EDB→Metasploit module mappings, PoC reliability rubric, CVSS tier quick reference, and searchsploit usage patterns
.claude/skills/exploit-db/SKILL.md on GitHub (opens in a new tab) -
mitre-attack
MITRE ATT&CK framework reference — tactics, techniques, and tool-to-TTP mappings for pentest documentation and detection rule writing
.claude/skills/mitre-attack/SKILL.md on GitHub (opens in a new tab) -
report-templates
CVSS 3.1 vector examples, executive summary template, full technical finding template, and remediation language bank for pentest reports
.claude/skills/report-templates/SKILL.md on GitHub (opens in a new tab) -
wordlists
SecLists path map, hashcat rules, CeWL usage, and custom wordlist generation for all attack categories
.claude/skills/wordlists/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.