Claude-Code-CyberSecurity-Skill

In the author's own words, from each skill's SKILL.md.

• 01-recon-osint

  Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessments

  skills/01-recon-osint/SKILL.md on GitHub (opens in a new tab)

• 02-vulnerability-scanner

  Dependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reporting

  skills/02-vulnerability-scanner/SKILL.md on GitHub (opens in a new tab)

• 03-exploit-development

  Proof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testing

  skills/03-exploit-development/SKILL.md on GitHub (opens in a new tab)

• 04-reverse-engineering

  Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering

  skills/04-reverse-engineering/SKILL.md on GitHub (opens in a new tab)

• 05-malware-analysis

  Static and dynamic malware analysis, YARA rule generation, sandbox configuration, behavioral profiling, and malware family classification

  skills/05-malware-analysis/SKILL.md on GitHub (opens in a new tab)

• 06-threat-hunting

  IOC extraction, threat intelligence correlation, MITRE ATT&CK mapping, hunt hypothesis generation, and detection rule creation

  skills/06-threat-hunting/SKILL.md on GitHub (opens in a new tab)

• 07-incident-response

  IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology

  skills/07-incident-response/SKILL.md on GitHub (opens in a new tab)

• 08-network-security

  Network traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall configuration auditing, and network anomaly detection

  skills/08-network-security/SKILL.md on GitHub (opens in a new tab)

• 09-web-security

  OWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized assessments

  skills/09-web-security/SKILL.md on GitHub (opens in a new tab)

• 10-cloud-security

  AWS/Azure/GCP security auditing, container and Kubernetes hardening, Infrastructure as Code scanning, and cloud compliance assessment

  skills/10-cloud-security/SKILL.md on GitHub (opens in a new tab)

• 11-csoc-automation

  SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking

  skills/11-csoc-automation/SKILL.md on GitHub (opens in a new tab)

• 12-log-analysis

  Security log parsing, anomaly detection, SIEM query building, Sigma rule creation, and correlation rule development across Splunk, Elastic, QRadar, and Microsoft Sentinel

  skills/12-log-analysis/SKILL.md on GitHub (opens in a new tab)

• 13-crypto-analysis

  SSL/TLS auditing, cipher suite analysis, hash algorithm identification, encryption implementation review, and cryptographic weakness detection in code

  skills/13-crypto-analysis/SKILL.md on GitHub (opens in a new tab)

• 14-red-team-ops

  Authorized red team engagement planning, C2 architecture design, attack methodology, lateral movement strategy, OPSEC, and professional reporting

  skills/14-red-team-ops/SKILL.md on GitHub (opens in a new tab)

• 15-blue-team-defense

  System hardening, detection engineering, security baseline monitoring, patch management, defense-in-depth architecture, and security posture improvement

  skills/15-blue-team-defense/SKILL.md on GitHub (opens in a new tab)

• 16-ai-llm-security

  LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI red teaming for authorized assessments

  skills/16-ai-llm-security/SKILL.md on GitHub (opens in a new tab)

• 17-mobile-security

  Android and iOS application security testing — static and dynamic analysis, APK/IPA inspection, OWASP MASVS/MASTG verification, secure-storage and transport review, and mobile malware triage for authorized assessments

  skills/17-mobile-security/SKILL.md on GitHub (opens in a new tab)

• 18-ot-ics-security

  Operational Technology and industrial control system security — Purdue model segmentation, industrial protocol analysis (Modbus, DNP3, S7, EtherNet/IP), PLC/HMI exposure, IEC 62443 alignment, and MITRE ATT&CK for ICS, for authorized and safety-conscious assessments

  skills/18-ot-ics-security/SKILL.md on GitHub (opens in a new tab)

• 19-grc-compliance

  Governance, risk, and compliance — risk assessment and scoring, control mapping across NIST CSF 2.0 / ISO 27001:2022 / SOC 2 / CIS Controls v8, gap analysis, audit evidence preparation, and security policy generation

  skills/19-grc-compliance/SKILL.md on GitHub (opens in a new tab)

• 20-supply-chain-security

  Software supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicious package indicators, CI/CD pipeline hardening, and artifact provenance/signing (SLSA, Sigstore)

  skills/20-supply-chain-security/SKILL.md on GitHub (opens in a new tab)

• 21-threat-intelligence

  Cyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment, STIX/TAXII and MISP, structured analytic models (Diamond, Kill Chain, ATT&CK), source scoring, actor/campaign tracking, and finished intelligence reporting

  skills/21-threat-intelligence/SKILL.md on GitHub (opens in a new tab)

• 22-purple-team

  Collaborative purple-team operations — threat-informed adversary emulation planning (ATT&CK, CTID, Atomic Red Team, CALDERA), the detect-tune-validate loop, detection coverage measurement (DeTT&CT/Navigator), safe execution and deconfliction, and MTTD/coverage reporting

  skills/22-purple-team/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more. 93.5k stars · 5 skills
• Understand-Anythingby Egonex-AI Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about… 90.6k stars · 9 skills
• oh-my-openagentby code-yeongyu OmO: Just type "mass ulw" keyword with your prompt. Now you are the master of graph engineering. 70.7k stars · 25 skills
• i-have-adhdby ayghri A skill to stop your coding agent from burying the answer. ADHD-friendly output. 60.1k stars · 1 skill
• scientific-agent-skillsby K-Dense-AI Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 250,000+ scientists worldwide. 177 ready-to-use va… 56.1k stars · 30 skills
• awesome-agent-skillsby VoltAgent A curated collection of 1000+ agent skills from official dev teams and the community, compatible with Claude Code, Codex, Gemini CLI, Curso… 36.9k stars