Remote Code Execution (RCE) Audit (offensive-rce)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

Remote Code Execution (RCE) and OS command injection auditing covering shell metacharacter injection, child_process/subprocess argument array separation, dynamic code evaluation sinks, expression language injection, and container sandboxing. Use when auditing code or endpoints that invoke system binaries or interpreters.

Operational Workflow