Active Directory permissions are a graph. A single misconfigured Access Control Entry (ACE), say a low-priv user with GenericAll over a group, WriteDacl over a computer, or WriteOwner over an OU, is a directed edge you can walk from where you are toward Domain Admin. This skill turns those edges into concrete commands with bloodyAD and impacket, after BloodHound CE (Apache-2.0, genuinely open source) has drawn the path.
Acl Abuse is a community-contributed Claude Code skill in the general-misc sub-category. It ships as a SKILL.md file that Claude Code auto-discovers under ~/.claude/skills/acl-abuse/ and loads when your prompt matches the skill's trigger.
When to invoke it: Use when BloodHound CE shows an outbound control edge from a principal you own toward a higher-value object, and you want the exact bloodyAD/impacket command to weaponize that ACE, plus detection and remediation. DCSync is covered here strictly as a post-compromise technique, not a user entry path.
The Acl Abuse Claude Code skill is built for Claude Code users and developers across all disciplines looking for general-purpose AI assistance. It's part of ClaudSkills (also referred to as Claude Skills or Claude Code Skills) — the open community-curated registry of 196,000+ SKILL.md files for Anthropic's Claude Code agent and the wider Claude ecosystem (Claude API, Claude Agent SDK).
mkdir -p ~/.claude/skills/acl-abuse curl -L https://claudskills.com/skills/acl-abuse/SKILL.md \ -o ~/.claude/skills/acl-abuse/SKILL.md
Or just download SKILL.md directly and drop it into ~/.claude/skills/acl-abuse/. Claude Code auto-discovers it on next session.
Skills live at ~/.claude/skills/acl-abuse/SKILL.md on macOS/Linux, or %USERPROFILE%\.claude\skills\acl-abuse\SKILL.md on Windows. See the full install guide for step-by-step instructions.
Open @claudskills_bot on Telegram, tap Open Desktop App, and the desktop app installs this skill for you. Or share the bot link with a colleague — they get the same one-tap install. Learn more →
The ClaudSkills desktop app installs any skill directly into ~/.claude/skills/ with one click — no terminal required. Pro starts at $9/mo or $149 lifetime.
For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.
SKILL.md from the source repository to ~/.claude/skills/acl-abuse/SKILL.md and restart Claude Code. Both flows are detailed at claudskills.com/install/.SKILL.md file that lives under ~/.claude/skills/<name>/ and tells the Claude Code CLI agent how to perform a specific task (instructions, prompts, allowed tools). Skills are auto-discovered at session start. Acl Abuse is one of 67,000+ skills indexed in the open ClaudSkills catalog, classified under the General category. Learn more at /learn/what-is-a-claude-skill/.If you reference this skill in a blog post, paper, or documentation, you can cite it as:
@misc{acl-abuse-2026,
author = {ClaudSkills},
title = {Acl Abuse [Claude Code skill]},
year = {2026},
publisher = {ClaudSkills},
url = {https://claudskills.com/skills/acl-abuse/}
}Grade A · scanned 2026-09-28 — free static scan against the OWASP Agentic Skills Top 10.
The scan flagged 1 of 10 categories (network), including lower-severity patterns. Patterns shown inside code fences are weighted as examples rather than instructions — read the grading methodology for what this does and does not guarantee.
Browse all General skills in the ClaudSkills registry, or explore these other picks from the same category:
Part of Acreator Store — Adam Lankamer's AI tools: PerfectStudio · Ucaption · UTagger · AutoXPoster · TestYourSkills · AutomationFlows · Au Naturel · Telegram @acreatorstore
SKILL.md files, not affiliated with, endorsed by, or sponsored by Anthropic.