🛡️

AutomationHTML

Red Team Flow Generator

by wiz-sec-public

Red Team Flow Generator is an Automation skill for Claude Code, published by wiz-sec-public in SITF.

179 stars18 forkson wiz-sec-public/SITFAdded 2026/09/07+1% in starsRepository updated 2026/07/29

View source on GitHub Download repo ZIP

agent-skillssdlc-securitysecurity-tools

Install in seconds

Install Red Team Flow Generator

Copy Red Team Flow Generator into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/wiz-sec-public/SITF/tree/main/.claude/skills/red-team-flow ~/.claude/skills/red-team-flow

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/wiz-sec-public/SITF.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: .claude/skills/red-team-flow/SKILL.md in wiz-sec-public/SITF
Installs to: ~/.claude/skills/red-team-flow
Collection: One of 3 skills cataloged from this repository
Category: Automation — 2109 skills

What Red Team Flow Generator does

Red Team Flow Generator creates SITF-compliant attack flow JSON from red team or pentest reports, URLs, or pasted findings. Use it to turn offensive security engagement notes into structured attack chains.

Red Team Flow Generator is cataloged under Automation on DirSkills. Red Team Flow Generator comes from a repository tagged agent-skills, sdlc-security and security-tools.

Documentation

README

Excerpt

Red Team Flow Generator

Generate SITF-compliant attack flow JSON files from red team or penetration testing reports.

Usage

/red-team-flow <engagement-name> [source]

engagement-name: Identifier for the engagement (e.g., "acme-2026q1", "client-sdlc-audit")
source: One of:
- --file <path>: Path to report file (markdown, txt, json, pdf)
- --url <url>: URL to report or findings page
- Omit to paste report text directly in conversation

Arguments: $ARGUMENTS

Supported Input Formats

The skill accepts red team and pentest reports in various formats:

Text-Based Reports

Markdown reports with findings sections
Plain text engagement notes
Bullet-point attack chains
Executive summaries with technical appendix

This is the opening of the README. Read the full README on GitHub.

Commands Red Team Flow Generator provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

/red-team-flow
/attack-flow
/technique-proposal

Frequently asked about Red Team Flow Generator

What else does wiz-sec-public publish alongside Red Team Flow Generator?
Red Team Flow Generator is one of 3 skills that DirSkills catalogs from wiz-sec-public/SITF, the repository it ships in. Its siblings there include Attack Flow Generator and Technique Proposal. Each one is a separate skill with its own page in this directory, installs the same way Red Team Flow Generator does, and is maintained by wiz-sec-public in that same repository. The rest of the collection is listed on the wiz-sec-public/SITF page.
How does Red Team Flow Generator compare to other Automation skills?
Red Team Flow Generator ranks #1924 by stars among the 2109 Automation skills in this catalog. The most-starred ones next to it are Autonomous Loops, Autonomous Agent Harness and Automation Audit Ops. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Red Team Flow Generator against them. Open each page to compare what they document and how they install.

More from wiz-sec-public/SITF

Red Team Flow Generator is one of 3 skills cataloged on DirSkills from wiz-sec-public/SITF.

See all 3 skills →

Attack Flow Generator

Attack Flow Generator creates SITF-compliant attack flow JSON from attack descriptions or incident reports. Use it when analyzing supply chain attacks, breaches, or security incidents.

Technique Proposal

Technique Proposal generates a PR-ready SITF technique when an attack step does not match an existing technique. It is used after /attack-flow identifies a gap and confirms the step is in scope.

More Automation skills

Red Team Flow Generator is one of 2109 Automation skills cataloged on DirSkills, ranked #1924 by stars among them.

Browse all Automation skills →

Autonomous Loops

Autonomous Loops provides patterns and reference implementations for running Claude Code in autonomous loops, from simple sequential pipelines to RFC-driven multi-agent DAG systems. Retained for compatibility; use continuous-agent-loop for new guidance.

Autonomous Agent Harness

Autonomous Agent Harness turns Claude Code into a self-directing agent system with persistent memory, scheduled tasks, computer use, and task queuing. Use it when continuous autonomous operation, scheduled tasks, or self-directing agent loops are needed.

Automation Audit Ops

Automation Audit Ops audits live automations, jobs, hooks, and connectors to identify what is working, broken, redundant, or missing before any fixes are made.