Viper
Adversary simulation and Red teaming platform with AI
Install / Use
claude mcp add FunnyWolf -- npx -y github:FunnyWolf/ViperIf the server publishes to npm under a different name, use that package instead — check the repo README.
MCP Server
Model Context Protocol server
Quality Score
Category
SecuritySupported Platforms
Tags
Our assessment of Viper
Viper scores 65/100 on our quality scale, 1056th of 1,101 Security skills we index.
Its MCP Server is 5.0 KB long, lightly structured (2 headings) and no code examples: a solid amount of guidance for an agent.
With 5,346 GitHub stars, it is one of the more widely adopted skills in the catalogue.
Maintenance, license and trust
- The repository was last updated about 5 months ago. That is recent enough to be usable, but agent tooling moves fast, so check the instructions against your agent's current version.
- Our last check on 2026-10-21 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 81/100, with 2 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
Viper compared with similar skills
All 4 of these similar skills score higher than Viper; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| Viper (this skill)by FunnyWolf | 65 | 5.3k | 5mo ago | MCP Server |
| Agent-Reachby Panniantong | 100 | 109.6k | today | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 79.0k | today | CLAUDE.md |
| CowAgentby zhayujie | 100 | 47.8k | today | CLAUDE.md |
| Scraplingby D4Vinci | 100 | 98.8k | 1d ago | MCP Server |
Frequently asked questions
- How do I install Viper?
- Run
claude mcp add FunnyWolf -- npx -y github:FunnyWolf/Viper. The install tabs above show the steps for each supported agent. - Which AI agents does Viper work with?
- It is written for Claude Code and Claude Desktop, as a MCP Server file. Other agents that read the same format can often use it too.
- Is Viper safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 81/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is Viper still maintained?
- The repository was last updated about 5 months ago. That is recent enough to be usable, but agent tooling moves fast, so check the instructions against your agent's current version.
Skill content
View source on GitHub
VIPER is a powerful and flexible red team platform. It integrates the core tools and functionalities required for adversary simulation and red team operations, assisting you in efficiently completing cybersecurity assessment tasks.
-
User-Friendly Interface
Provides an intuitive interface that enables red team members to rapidly initiate security assessment tasks. -
Multi-Platform Support
Supports red team assessments across multiple operating systems, including Windows, Linux, and macOS, ensuring broad compatibility. -
Out-of-the-Box Red Teaming Tools
Designed to cover all phases of the MITRE ATT&CK framework, offering a comprehensive attack simulation solution. -
Integrated LLM Agent
Built-in Large Language Model (LLM) agent enhances automated processing capabilities and intelligent decision-making support. -
Automated Workflows
Supports orchestration and notification mechanisms for 24/7 monitoring of target environments. -
Rich Built-in Modules Integrates over 100 post-exploitation modules covering all stages of the MITRE ATT&CK framework, meeting the needs of different scenarios.
-
Custom Extensibility
Supports Python-based custom module development to meet specialized requirements or add extended functionalities. -
More Advanced Features Includes built-in anti-tracing/handler firewall/defense evasion/pivot graph/automated notification functions.
Product Comparison
| | VIPER | Cobalt Strike | NightHawk | BruteRatel | |--------------------|-----------------------------|-------------------|-------------------|------------------| | Implants | Windows<br/>Linux<br/>MacOS | Windows | Windows | Windows | | Visual UI | ✅ | ✅ | ✅ | ✅ | | Pivot Graph | ✅ | ✅ | ✅ | ✅ | | Custom Plugin | Python | CNA | ❌ | ❌ | | Built-in Evasion | ✅ | ❌ | ✅ | ✅ | | Automation | ✅ | ❌ | ✅ | ❌ | | Team Collaboration | ✅ | ✅ | ❌ | ❌ | | LLM Agent | ✅ | ❌ | ❌ | ❌ | | Price | Free | $12,600 user/year | $10,000 user/year | $3,000 user/year |
Website
Related Skills
Agent-Reach
109.6kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
79.0kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
CowAgent
47.8kOpen-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.
Scrapling
98.8k🕷️ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.