# Builtin Agent Skill

Adding a built-in Agent Skill (an attack technique like ssrf, xxe, rce) that ships...

- Repository: https://github.com/samugit83/redamon (3261 stars)
- Category: AI and agents
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add samugit83/redamon --skill builtin-agent-skill -g -a claude-code -y`
Codex: `npx skills add samugit83/redamon --skill builtin-agent-skill -g -a codex -y`
Cursor: `npx skills add samugit83/redamon --skill builtin-agent-skill -g -a cursor -y`
Gemini CLI: `npx skills add samugit83/redamon --skill builtin-agent-skill -g -a gemini-cli -y`

## Description

Adding a built-in Agent Skill (an attack technique like ssrf, xxe, rce) that ships hardcoded in RedAmon: classified by the Intent Router, injected into the agent prompt, toggled per project, badged in the chat drawer. Ten layers across agentic and webapp, two of which fail with no error. Trigger: adding or editing a built-in attack skill; a new agentic/prompts/<skill_id>_prompts.py; editing agentic/prompts/classification.py, agentic/prompts/__init__.py build_builtin_skill_workflow, agentic/prompts/skill_parts.py, KNOWN_ATTACK_PATHS in agentic/state.py, or the webapp AttackSkillsSection / AIAssistantDrawer.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

## When to Use

- Adding a first-class attack technique the agent classifies and follows a workflow for.

For a user-uploadable workflow, use `add-community-skill`
instead. For a *tool* the agent calls, use `agentic-tool-integration`.
For per-skill tunable defaults, use `project-settings-cascade`.

---

## Critical Rules

The rest: https://github.com/samugit83/redamon/blob/HEAD/skills/builtin-agent-skill/SKILL.md