Claude-Code-CyberSecurity-Skill

In the author's own words, from each skill's SKILL.md.

• Reconnaissance & OSINT Automation

  Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessments

  skills/01-recon-osint/SKILL.md on GitHub (opens in a new tab)

• Vulnerability Scanning & Assessment

  Dependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reporting

  skills/02-vulnerability-scanner/SKILL.md on GitHub (opens in a new tab)

• Exploit Development & Payload Engineering

  Proof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testing

  skills/03-exploit-development/SKILL.md on GitHub (opens in a new tab)

• Reverse Engineering & Binary Analysis

  Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering

  skills/04-reverse-engineering/SKILL.md on GitHub (opens in a new tab)

• Malware Analysis & Sandboxing

  Static and dynamic malware analysis, YARA rule generation, sandbox configuration, behavioral profiling, and malware family classification

  skills/05-malware-analysis/SKILL.md on GitHub (opens in a new tab)

• Threat Hunting & IOC Analysis

  IOC extraction, threat intelligence correlation, MITRE ATT&CK mapping, hunt hypothesis generation, and detection rule creation

  skills/06-threat-hunting/SKILL.md on GitHub (opens in a new tab)

• Incident Response & Digital Forensics

  IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology

  skills/07-incident-response/SKILL.md on GitHub (opens in a new tab)

• Network Security & Traffic Analysis

  Network traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall configuration auditing, and network anomaly detection

  skills/08-network-security/SKILL.md on GitHub (opens in a new tab)

• Web Application Security Testing

  OWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized assessments

  skills/09-web-security/SKILL.md on GitHub (opens in a new tab)

• Cloud Security & Container Hardening

  AWS/Azure/GCP security auditing, container and Kubernetes hardening, Infrastructure as Code scanning, and cloud compliance assessment

  skills/10-cloud-security/SKILL.md on GitHub (opens in a new tab)

• CSOC Operations & Playbook Automation

  SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking

  skills/11-csoc-automation/SKILL.md on GitHub (opens in a new tab)

• Log Analysis & SIEM Integration

  Security log parsing, anomaly detection, SIEM query building, Sigma rule creation, and correlation rule development across Splunk, Elastic, QRadar, and Microsoft Sentinel

  skills/12-log-analysis/SKILL.md on GitHub (opens in a new tab)

• Cryptographic Analysis & Assessment

  SSL/TLS auditing, cipher suite analysis, hash algorithm identification, encryption implementation review, and cryptographic weakness detection in code

  skills/13-crypto-analysis/SKILL.md on GitHub (opens in a new tab)

• Red Team Operations & Engagement Planning

  Authorized red team engagement planning, C2 architecture design, attack methodology, lateral movement strategy, OPSEC, and professional reporting

  skills/14-red-team-ops/SKILL.md on GitHub (opens in a new tab)

• Blue Team Defense & Hardening

  System hardening, detection engineering, security baseline monitoring, patch management, defense-in-depth architecture, and security posture improvement

  skills/15-blue-team-defense/SKILL.md on GitHub (opens in a new tab)

• AI & LLM Security

  LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI red teaming for authorized assessments

  skills/16-ai-llm-security/SKILL.md on GitHub (opens in a new tab)

• Mobile Application Security

  Android and iOS application security testing — static and dynamic analysis, APK/IPA inspection, OWASP MASVS/MASTG verification, secure-storage and transport review, and mobile malware triage for authorized assessments

  skills/17-mobile-security/SKILL.md on GitHub (opens in a new tab)

• OT / ICS / SCADA Security

  Operational Technology and industrial control system security — Purdue model segmentation, industrial protocol analysis (Modbus, DNP3, S7, EtherNet/IP), PLC/HMI exposure, IEC 62443 alignment, and MITRE ATT&CK for ICS, for authorized and safety-conscious assessments

  skills/18-ot-ics-security/SKILL.md on GitHub (opens in a new tab)

• GRC & Compliance

  Governance, risk, and compliance — risk assessment and scoring, control mapping across NIST CSF 2.0 / ISO 27001:2022 / SOC 2 / CIS Controls v8, gap analysis, audit evidence preparation, and security policy generation

  skills/19-grc-compliance/SKILL.md on GitHub (opens in a new tab)

• Supply Chain Security

  Software supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicious package indicators, CI/CD pipeline hardening, and artifact provenance/signing (SLSA, Sigstore)

  skills/20-supply-chain-security/SKILL.md on GitHub (opens in a new tab)

• Threat Intelligence & CTI

  Cyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment, STIX/TAXII and MISP, structured analytic models (Diamond, Kill Chain, ATT&CK), source scoring, actor/campaign tracking, and finished intelligence reporting

  skills/21-threat-intelligence/SKILL.md on GitHub (opens in a new tab)

• Purple Team & Adversary Emulation

  Collaborative purple-team operations — threat-informed adversary emulation planning (ATT&CK, CTID, Atomic Red Team, CALDERA), the detect-tune-validate loop, detection coverage measurement (DeTT&CT/Navigator), safe execution and deconfliction, and MTTD/coverage reporting

  skills/22-purple-team/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• Understand-Anythingby Egonex-AI Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about… 86.5k stars · 9 skills
• archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more. 84.1k stars · 2 skills
• oh-my-openagentby code-yeongyu OmO: Just type "mass ulw" keyword with your prompt. Now you are the master of graph engineering. 70.1k stars · 25 skills
• i-have-adhdby ayghri A skill to stop your coding agent from burying the answer. ADHD-friendly output. 57.3k stars · 1 skill
• scientific-agent-skillsby K-Dense-AI Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 250,000+ scientists worldwide. 177 ready-to-use va… 50.5k stars · 30 skills
• nanoclawby nanocoai A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other… 31k stars · 30 skills