{"full_name":"mukul975/Anthropic-Cybersecurity-Skills","owner":"mukul975","name":"Anthropic-Cybersecurity-Skills","url":"https://github.com/mukul975/Anthropic-Cybersecurity-Skills","description":"817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0","homepage":"https://mahipal.engineer/Anthropic-Cybersecurity-Skills/","topics":[],"language":"Python","license":"Apache-2.0","avatar":"https://avatars.githubusercontent.com/u/42860185?u=b80eec76a4830944af4b0506fe9af429ee9451e3&v=4","created_at":"2026-02-25T09:47:50Z","pushed_at":"2026-08-31T04:32:44Z","metrics":{"stars":35862,"forks":4373,"watchers":270,"issues":45,"prs":102,"releases":4,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":9},"growth":{"day":{"stars":46,"forks":8,"base_day":"2026-11-09"},"week":{"stars":412,"forks":55,"base_day":"2026-11-03"},"month":{"stars":2053,"forks":270,"base_day":"2026-10-11"}},"history":{"dates":["2026-10-03","2026-10-04","2026-10-05","2026-10-06","2026-10-07","2026-10-08","2026-10-09","2026-10-10","2026-10-11","2026-10-12","2026-10-13","2026-10-14","2026-10-15","2026-10-16","2026-10-17","2026-10-18","2026-10-19","2026-10-20","2026-10-21","2026-10-22","2026-10-23","2026-10-24","2026-10-25","2026-10-26","2026-10-27","2026-10-28","2026-10-29","2026-10-30","2026-10-31","2026-11-01","2026-11-02","2026-11-03","2026-11-04","2026-11-09","2026-11-10"],"stars":[33337,33373,33417,33516,33572,33657,33713,33748,33809,33854,33906,33957,34056,34158,34296,34387,34443,34501,34556,34611,34710,34762,34808,34853,34909,34945,35057,35116,35186,35231,35297,35450,35511,35816,35862],"forks":[4050,4052,4058,4067,4070,4079,4084,4089,4103,4110,4117,4121,4139,4156,4172,4183,4190,4201,4214,4227,4246,4247,4228,4238,4247,4257,4273,4280,4290,4296,4300,4318,4325,4365,4373],"watchers":[266,266,267,267,268,268,269,269,269,269,270,271,271,271,273,272,273,272,272,272,274,272,267,267,267,264,264,264,264,266,266,267,268,270,270],"issues_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"prs_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null]},"boards":{},"same_owner":[],"issues":[{"number":59,"title":"[NEW SKILL] multi-agent-prompt-injection-defense: defend against prompt injection across agent communication channels","comments":4,"created_at":"2026-05-25T14:06:30Z"},{"number":114,"title":"free","comments":4,"created_at":"2026-07-20T11:38:50Z"},{"number":121,"title":"[Skill Request]: Automated Web Application Security Assessment with OWASP ZAP","comments":2,"created_at":"2026-08-15T06:03:25Z"},{"number":97,"title":"[NEW SKILL] skill-name-here","comments":2,"created_at":"2026-06-28T07:20:41Z"},{"number":72,"title":"[NEW SKILL] skill-name-here","comments":2,"created_at":"2026-06-08T16:01:26Z"},{"number":56,"title":"[Bug]: the phishing skills tab ain't working","comments":1,"created_at":"2026-05-24T06:38:35Z"},{"number":126,"title":"cyber ","comments":1,"created_at":"2026-08-20T11:53:59Z"},{"number":96,"title":"[IMPROVE] skill-name-here","comments":1,"created_at":"2026-06-26T17:33:33Z"}],"discussions":[{"number":163,"title":"\"Black October\" & the AI Vulnpocalypse: How is your team balancing AI agent speed with deterministic guardrails?","comments":2,"category":"Show and tell","created_at":"2026-10-25T14:42:53Z"},{"number":99,"title":"✨ Feature Request: Add automated safety scanning for new AI skills via CI/CD","comments":0,"category":"Ideas","created_at":"2026-07-01T13:45:24Z"},{"number":77,"title":"Is it possible to make a bulk selection or a select all button?","comments":0,"category":"Q&A","created_at":"2026-06-12T10:22:47Z"},{"number":68,"title":"Interest in this project","comments":1,"category":"General","created_at":"2026-05-28T17:34:56Z"},{"number":53,"title":"Is this a scam project? My Chrome browser detected a virus during download.","comments":3,"category":"General","created_at":"2026-05-12T08:09:58Z"},{"number":52,"title":"Add IEC 62443 4-1, 4-2, and CRA and MITRE EMB3D it would be good","comments":0,"category":"General","created_at":"2026-05-05T04:33:19Z"},{"number":43,"title":"Adding MITRE Fight Fraud Framework (F3) mapping to existing skills","comments":0,"category":"Announcements","created_at":"2026-04-20T23:11:17Z"},{"number":38,"title":"v1.2.0 Released — Five Framework Coverage (MITRE ATT&CK + NIST CSF + ATLAS + D3FEND + NIST AI RMF)","comments":0,"category":"Announcements","created_at":"2026-04-06T12:23:58Z"}],"latest_release":{"name":"v1.3.0","tag":"v1.3.0","published_at":"2026-06-22T17:11:11Z","body":"## v1.3.0\n\nThis release grows the library from 762 to 817 skills, adds a sixth framework (MITRE F3), and fixes the plugin version that installs were reporting as 1.0.\n\n### 55 new skills\n\nBuilt around the fastest-growing attack and skills areas from the 2025-2026 ISC2, WEF, CrowdStrike, and Mandiant reports. Three new domains, plus depth in six existing ones.\n\nNew domains:\n- AI Security (12 skills) covers LLM red-teaming with garak and PyRIT, direct and indirect prompt injection, RAG poisoning, MCP tool-poisoning, agentic tool-invocation controls, and runtime guardrails.\n- Supply Chain Security (5 skills) covers SBOM generation, dependency confusion, malicious npm package triage, typosquatting detection, and SLSA/Sigstore provenance.\n- Hardware and Firmware Security (4 skills) covers CHIPSEC UEFI audits, Secure Boot bypass detection, TPM measured-boot attestation, and bootkit hunting in the EFI System Partition.\n\nExpanded coverage:\n- Identity: 10 skills on Entra ID and ADCS attacks (ROADtools, GraphRunner, AADInternals, Certipy, BloodHound CE, device-code phishing) since stolen credentials and valid-account abuse now lead initial access.\n- Cloud-native: 8 skills (Stratus Red Team, Pacu, CloudFox, container escape, Kubernetes RBAC, Falco, Trivy, kube-bench).\n- Offensive C2 and lateral movement: 6 skills (Sliver, Havoc, NetExec, DPAPI, NTLM relay to ESC8, redirector infrastructure).\n- DFIR: 6 skills (Hayabusa, Chainsaw, KAPE, Velociraptor, Eric Zimmerman tools, Plaso).\n- Backfill for thin domains: OpenCTI, MISP, honeytokens, and post-quantum cryptography migration.\n\nEvery skill ships with the full folder layout (SKILL.md, references, runnable `scripts/agent.py`, LICENSE), real tool commands sourced from each project's docs, and ATT&CK or ATLAS plus NIST CSF mappings.\n\n### MITRE Fight Fraud Framework (F3 v1.1)\n\nAll 94 fraud-relevant skills now carry an `mitre_f3` frontmatter block alongside `mitre_attack`. F3 adds two tactics that ATT&CK does not have, Positioning and Monetization, so a single skill can trace a cyber intrusion through to the financial loss it causes. Every F3 technique ID was checked against the upstream STIX bundle. This makes F3 the sixth mapped framework after ATT&CK, NIST CSF 2.0, ATLAS, D3FEND, and NIST AI RMF.\n\n### MITRE ATT&CK v19.1\n\nAll skills were revalidated against ATT&CK v19.1 using the official `mitreattack-python` library. Revoked and restructured IDs were remapped (the T1562 Impair Defenses family and T1070.001 moved to the new T1685 family), and v19's tactic split (Defense Evasion into Stealth and Defense Impairment) is reflected in the README.\n\n### Fixes and automation\n\n- `plugin.json` was stuck at version 1.0.0, so installs showed 1.0 everywhere. It now tracks the release version.\n- The skill count syncs into the README, marketplace.json, and plugin.json automatically on every skills change, so the number stays correct without manual edits.\n- Releases now bump plugin.json as well as marketplace.json.\n\n**Full diff:** https://github.com/mukul975/Anthropic-Cybersecurity-Skills/compare/v1.2.0...v1.3.0\n"},"readme":true,"readme_zh":false,"news":[{"title":"Anthropic-Cybersecurity-Skills:817 structured cybersecurity skills for AI agents","url":"https://github.com/mukul975/Anthropic-Cybersecurity-Skills","hn":"https://news.ycombinator.com/item?id=48654971","source":"Hacker News","lang":"en","date":"2026-06-24","points":5,"comments":0},{"title":"Cybersecurity Skills for AI Agents (agentskills.io standard)","url":"https://github.com/mukul975/Anthropic-Cybersecurity-Skills","hn":"https://news.ycombinator.com/item?id=47452785","source":"Hacker News","lang":"en","date":"2026-03-20","points":2,"comments":0},{"title":"AIエージェント向け サイバーセキュリティSkills 818件をGitHub公開 MITRE・NISTなど6枠組みに対応","url":"https://rocket-boys.co.jp/security-measures-lab/ai-agent-818-skills-6-frameworks-report/","source":"rocket-boys","lang":"zh","date":"2026-09-24"},{"title":"Anthropic-Cybersecurity-Skills快速上手：一行npx命令3分钟安装教程（新手必看）","url":"https://blog.csdn.net/gitblog_00852/article/details/151013406","source":"blog.csdn","lang":"zh","date":"2026-08-29"},{"title":"GitHub - mukul975/Anthropic-Cybersecurity-Skills: 817个结构化网络安全技能，适用于AI代理","url":"https://blog.csdn.net/design1985/article/details/162225611","source":"blog.csdn","lang":"zh","date":"2026-06-23"},{"title":"Anthropic Cybersecurity Skills Library Guide","url":"https://opentools.ai/resources/anthropic-cybersecurity-skills","source":"opentools.ai","lang":"en","date":"2026-05-23"},{"title":"GitHub - mukul975/Anthropic-Cybersecurity-Skills: 754 structured cybersecurity skills for AI agents...","url":"https://x.com/lcheylus/status/2038875196593951190","source":"x","lang":"en","date":"2026-03-31"},{"title":"Wayfinder: The Claude Code Skill That Plans Projects Too Big for One Session","url":"https://news.google.com/rss/articles/CBMikwFBVV95cUxNb19BX3FEOU13ejk4STJzU0huRzlNbHlMRWh3NHY3ZHlDeElPQ1BibjBFUnpHRUZqT3BOMmRTckNqbGNDaGh4NnJnMnZrLVp4VC1zZGdySTlDb3RPSkxUZ2xZaEpXNmdDWTg5M0w1TUg3MlVxblhWbU1VNU1SM0hVemhfamx2R1BFNi1uSzNBN0h6Tlk?oc=5","source":"Pasquale Pillitteri","lang":"en","date":"2026-07-30"},{"title":"Anthropic Cybersecurity Skills: 754 Skills for AI Agents","url":"https://news.google.com/rss/articles/CBMiiwFBVV95cUxNVzJzTTAyVzd2cGhDNkNFTlVtOWdON1hDblc0YndraVZpakJJWkQzMWZia2RFSmtTX3hidG9uN0xVWHpCZDc4c1V4QWEtNmxtNXVHeTgtVU5paTZhU0xZWTZUbEJfY3pjaVJPQTVfODNNM0R6blZIbzc5RUllVmpEMzFFcjMzLUF1OFhR?oc=5","source":"Pasquale Pillitteri","lang":"en","date":"2026-06-21"},{"title":"Ponytail: the AI Skill That Cuts 54% of the Code","url":"https://news.google.com/rss/articles/CBMiekFVX3lxTE4tVUVfZjZtbFJFSjh2WDZHMHgtNmJSdC1qX1VaRHpvVG9idXRsdUM0ajV3a01qXzZZWGxCdFlSU1dOcnFpY1k1Y0g5SFB5QjBkMmVBai1fellINWh5c2xYSWhycGgzeGtxdFJKd25aQjNsRVFYTmR6MTRn?oc=5","source":"Pasquale Pillitteri","lang":"en","date":"2026-06-21"},{"title":"Anthropic Cybersecurity Skills：面向 AI 智能体的 754 项技能","url":"https://news.google.com/rss/articles/CBMikAFBVV95cUxNN3g0ck8tUkNqMFNrRnU4ZFRWYTN6SElrTXhyQzJnMEZIRFd2al8zejh2SmVkRC04MU9IY2pTWUVrQ1RRMlBEXzgxQmp5VEtjZDhvOFhCZUduc296bUEtaWRoT3AzNVVhTFRlcEM0ekxvUkFoUktadXkxbXExTjNxOGJBX194YkFKbTR3T29XVFI?oc=5","source":"Pasquale Pillitteri","lang":"zh","date":"2026-06-21"},{"title":"Has the Lobster Become a Thing of the Past? Reviewing Those Hermes Agent Tools That Boost Your Productivity by 100x","url":"https://news.google.com/rss/articles/CBMiZEFVX3lxTFBXVXM5eVQ4WTI0QmZDYnQtT1c2YzV4LXJ1SEdLRkRZdXZoam1SV3RkY0lJank2aUx1a1V3eHJ1YTNVSjZGT0o0N3Q2LWRvenBEV2VvYWRMWGJFRDRkX0ZlemI4bXk?oc=5","source":"Binance","lang":"en","date":"2026-04-13"},{"title":"Is Lobster a Thing of the Past? A Review of Those Hermes Agent Tools That Boost Your Productivity by 100x","url":"https://news.google.com/rss/articles/CBMiZEFVX3lxTE5xZTVydkFnNEJJMzFDN0lzbkNBMFp2THl5SHpEeU5UVlRrdFVDaGFFTFZwNDliTXpqdVBQR0FMZjM0VFM2RnNNNmd3ZVhSRTdneFlua3dHTDBDcXJ5YXJfemFuSk4?oc=5","source":"Binance","lang":"en","date":"2026-04-13"},{"title":"Hermes Agent指南：超越OpenClaw，让产能飙升100倍","url":"https://news.google.com/rss/articles/CBMiaEFVX3lxTE52OXdnWEJ5OHNqOGZrZHhkZC1IMjE4Vzk5WjhDYmRPemxlMFAxTG9VLTdoYXJndm02UGFVMTFuOVVtZjBDTVNMNzQzcVdPWGxLc2V1a2JIcVo2MTdpOHEyVGdndEJHMmI0?oc=5","source":"Binance","lang":"zh","date":"2026-04-13"}],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}