Skip to main content
affpapa.org
RU EN
skill CX Codex

anthropic-cybersecurity-skills — Claude Code skill

A library of 754 structured cybersecurity skills across 26 domains. Useful when your agent works through an incident or hunts for threats.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add reason-machines/security-skills --skill anthropic-cybersecurity-skills -a claude-code
Open on GitHub

What anthropic-cybersecurity-skills does

The skill hands your agent a library of 754 security write-ups split into 26 domains. Every entry sits in its own folder: SKILL.md with YAML frontmatter, references/standards.md for framework mappings, references/workflows.md for procedures, Python helpers under scripts/, and templates plus checklists in assets/. Mappings cover MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, MITRE D3FEND and NIST AI RMF.

Loading happens in stages. The agent reads frontmatter first to keep token cost low, then pulls the full skill body only when it needs it. You can look skills up by domain, by ATT&CK technique or by tag — the README ships Python snippets that walk the folders and parse the YAML. Those snippets import pyyaml, so without it the frontmatter parsing fails at the import line.

Installation runs through npx skills add with a flag naming your platform, and the skill file lands in that platform's directory. Six platforms are covered: Claude, Codex, Cursor, GitHub Copilot, Gemini CLI and OpenCode. GitHub Copilot uses a different command, gh skill install.

What it helps with

  • work through a security incident from the first step
  • map an attack to a MITRE ATT&CK technique
  • run memory forensics on a dump
  • check cloud security posture
  • find the right skill by domain or tag

Example prompts for the agent

  • Help me investigate this security incident and tell me which skills to load
  • Map this attack to MITRE ATT&CK techniques
  • What security skills are available in the library?

How to install anthropic-cybersecurity-skills

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill anthropic-cybersecurity-skills -a claude-code

2Manually: put the files in place

~/.claude/skills/anthropic-cybersecurity-skills/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/anthropic-cybersecurity-skills/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about anthropic-cybersecurity-skills

How do I install anthropic-cybersecurity-skills in Claude Code?

Run npx skills add reason-machines/security-skills --skill anthropic-cybersecurity-skills -a claude-code. The skill lands at ~/.claude/skills/anthropic-cybersecurity-skills/SKILL.md.

What does anthropic-cybersecurity-skills do?

It gives the agent 754 cybersecurity skills across 26 domains, each mapped to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, MITRE D3FEND and NIST AI RMF.

Which platforms does this skill support?

Claude, Codex, Cursor, GitHub Copilot, Gemini CLI and OpenCode. Each one has its own install command and its own path for the skill file.

Similar skills

All skills for Security →
incident-response Alireza Rezvani Sorts a fired alert into one of 14 incident types, filters false positives, and tells you who to page and what to preserve. 634installs incident-triage briiirussell Guides rapid security incident triage and containment using the NIST SP 800-61 methodology. Useful when handling breaches, malware, or suspicious activity. CX Codex +1 361installs analyzing-malware-sandbox-evasion-techniques mahipal Reads Cuckoo and AnyRun behavioral reports and flags the signs that a sample spotted the sandbox and played dead. CX Codex +1 363installs memory-forensics Dávid Balatoni This skill covers RAM capture and memory-dump analysis, including process review, injection checks, network traces, and malware artifacts. CX Codex 11,027installs analyzing-memory-dumps-with-volatility mahipal Investigates RAM memory dumps using Volatility 3 to uncover hidden malware, code injections, network activity, and cached credentials. CX Codex +1 354installs quantakrypto pqc-tools quantakrypto Connects 16 cryptographic audit tools to your agent. It helps discover legacy algorithms in source files and plan transitions to post-quantum standards. CX Codex +1 ★ 15repo stars

From the same set69

pentest-agents-bug-bounty-framework A bug bounty testing setup for autonomous vulnerability discovery. It coordinates 50 specialized agents, connects findings into exploit chains, and tracks targets in a local brain. CX Codex +1 1,300installs avast-premium-security-malware-analysis A skill for studying Avast Premium Security internals: behavior shield, real-time protection, malware detection. Built for educational and defensive research. CX Codex +1 1,100installs security-awareness-malicious-repository-detection Flags malicious GitHub repositories pretending to be cracked or pirated software. Helps inspect suspicious code sources before downloading. CX Codex +1 1,100installs avast-premium-security-detection This skill reviews suspicious repositories that claim to distribute cracked antivirus software. Use it for an initial malware and source-authenticity check. CX Codex +1 1,100installs wxmini-security-audit This skill inspects decompiled wxapkg bundles for leaked secrets, API endpoints, weak crypto and vulnerabilities. Run it before shipping a mini-program. CX Codex +1 1,100installs unisecurityguard-academic-whistleblower-archive GitHub-based documentation blueprint for academic employment disputes and whistleblowing. It preserves social media evidence against platform censorship. CX Codex +1 1,100installs report-malicious-repository Flags repositories that pose as antivirus or other commercial software and walks you through filing a GitHub report. CX Codex +1 1,100installs avast-security-awareness Trains your agent to flag repositories posing as antivirus tools or cracked software, and to warn you before anything gets downloaded. CX Codex +1 1,100installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor