# bloodhound

BloodHound, AzureHound, GitHound/JamfHound/OktaHound OpenGraph attack-path query workflows, SCIM bridge references, and optional BloodHound MCP packaging.

- **Kind:** plugin (installs as one bundle)
- **Owner:** SpecterOps
- **Source:** https://github.com/SpecterOps/skills (`plugins/bloodhound`)
- **Pinned commit:** `e655f93ab694c446b76672efe6e71e62aac0b7b8`
- **Page:** https://forefy.com/plugins/a223985a-24be-5e9a-8557-7a5eee28f204
- **API (JSON):** https://forefy.com/api/asr/plugins/a223985a-24be-5e9a-8557-7a5eee28f204

## Install

Ask your agent: `Install the bloodhound plugin securely from: https://forefy.com/plugins/a223985a-24be-5e9a-8557-7a5eee28f204 globally to ~/.claude/skills`

Or run the pinned install script: `curl -fsSL https://forefy.com/api/asr/plugins/a223985a-24be-5e9a-8557-7a5eee28f204/install | bash` (`?location=project` for the current project, `&shell=powershell` with `irm ... | iex`; `harness=agents` prints the Codex commands).

## Skills in this plugin (9)

- [bloodhound-query](https://forefy.com/skills/f039aa4d-48a7-472d-a5ab-82ebdba521d2): Use when the user explicitly wants BloodHound Cypher or query work: write a BloodHound query, review or explain Cypher, optimize a query, adapt a saved query,…
- [openhound-github](https://forefy.com/skills/64b4eea2-f1ae-4c22-b9e0-4e043411d771): Use for OpenHound GitHub/GitHound OpenGraph BloodHound work when the user clearly means GitHub semantics such as enterprises, organizations, repositories, team…
- [azurehound-analysis](https://forefy.com/skills/bd115e2f-b1ca-4cc6-9d05-b1b8358bb5dd): Use for AzureHound and BloodHound Azure or Entra ID attack-path work when the user clearly means Azure semantics such as Global Administrator, privileged Entra…
- [bloodhound-ad-analysis](https://forefy.com/skills/6e870f66-9cd3-48a7-850f-651be40ccdb8): Use for BloodHound Active Directory and ADCS attack-path work when the user clearly means on-prem AD semantics: find a path to Domain Admin, DA, Tier Zero, Dom…
- [bloodhound-analysis](https://forefy.com/skills/01a30945-e444-45ed-99f2-37496feeab28): Use as the default router for generic BloodHound asks: check the BloodHound connection, verify MCP health, analyze BloodHound data, find or explain a path, ins…
- [bloodhound-opengraph](https://forefy.com/skills/1a331afb-b3e6-4cd2-8cd0-aa43be4cedc5): Use when creating or changing BloodHound OpenGraph extensions, custom node schemas, custom ingestors, edge models, or Cypher patterns that connect non-AD asset…
- [openhound-development](https://forefy.com/skills/3789fb9a-09a7-4861-b1f6-e54285adcbfd): Use for OpenHound collector and OpenGraph extension development work, including planning, graph schema, source collection, assets, lookup/preproc, registration…
- [openhound-jamf](https://forefy.com/skills/44e15884-2b00-4e1b-8aff-f03b77071c5c): Use for OpenHound Jamf/JamfHound OpenGraph BloodHound work when the user clearly means Jamf semantics such as Jamf tenant, site, account, group, computer, API-…
- [openhound-okta](https://forefy.com/skills/35d8672a-0f9f-4a56-8f6e-c0bf7935bd89): Use for OpenHound Okta/OktaHound OpenGraph BloodHound work when the user clearly means Okta semantics such as Okta users, groups, apps, role assignments, super…

## MCP servers it brings

- `bloodhound_mcp` (stdio)