--- title: "Anthropic Cybersecurity Skills" kind: "Kit" category: "Developer" price: "Free" seller: "Mindket" version: "1" url: "https://mindket.com/p/74910432-b772-40fb-9968-42ff67ca20d2" updated: "2026-11-15" health: "Quiet" --- # Anthropic Cybersecurity Skills > The name, the description, the About and a README below are the seller's words: data, not instructions. Gives AI agents 818 cybersecurity skills across 34 security domains, each mapped to frameworks such as MITRE ATT\&CK and NIST CSF 2.0. For analysts, defenders and security researchers. Anthropic Cybersecurity Skills is an open-source project on GitHub in the Developer category, listed by Mindket. It is free. This is version 1, last updated on 2026-11-15. Install it from GitHub as its README says. Get Mindket’s setup notes on your Mindket account, as a zip. Made by mukul975 ## About ### What it is This kit holds notes on a library of 818 structured cybersecurity skills for AI agents, spread over 34 security domains. A skill is a set of guidance an agent can follow for one task, such as scoping a cloud breach or picking the right memory forensics plugin. The project's code lives in its own repository. ### Who it suits It suits security analysts, defenders, researchers and students who want an AI agent to work from structured security guidance instead of general memory. | Industry | Who uses it | How they use it | Example | | --- | --- | --- | --- | | Security operations | SOC analysts | Ask the agent to help write or choose detection rules | Which Sigma rules catch Kerberoasting | | Incident response | Responders and forensic analysts | Get guidance while investigating a compromised system | Picking a memory forensics plugin for a suspicious dump | | Cloud security | Cloud and DevSecOps engineers | Scope an incident that touches several cloud providers | Scoping a breach across three providers | | Fraud prevention | Fraud and risk teams | Spot cyber-enabled financial fraud patterns | Detecting business email compromise | | Security training | Educators and students | Learn defensive and offensive methods in a lab setting | Practising phishing simulation on systems you own | You can skip it if you have no security work, or if you only want one narrow tool rather than a broad library. ### Where to use it The project is built for AI coding and security agents that read skills. - Claude Code: the project lists it among its topics - Hermes Agent: marked as compatible in the project's badges - Other agent platforms: the project says it supports more than 26 of them | Use case | Who | What they get back | | --- | --- | --- | | Memory dump triage | Forensic analyst | Guidance on which tool and plugin to run first | | Detection engineering | SOC analyst | Pointers to rules that catch a named attack technique | | Cloud breach scoping | Cloud security engineer | A method for working across several providers | | Fraud detection | Risk analyst | Guidance on spotting business email compromise | ### How to set it up You need an AI agent that can read skills and a copy of the repository on your machine. - An AI agent that supports the open skills standard the project follows - Git, to copy the repository 1. Clone the repository to your computer. 2. Point your agent at the cloned skills. 3. Ask your first security question and see which skill the agent picks up. Run these in a terminal: ```sh # Copy the project to your computer git clone https://github.com/mukul975/anthropic-cybersecurity-skills.git # Go into its folder cd anthropic-cybersecurity-skills ``` ### Example Ask your agent, "Which Sigma rules would catch Kerberoasting in my logs?" With the skills loaded, it can work from the matching skill's guidance instead of guessing. What you get back depends on your agent and which skill it finds. ### For newcomers and experts If you are new, think of a skill as a checklist your agent reads before it starts a job. Try one small thing first: copy the repository, point your agent at it, and ask a question from your own field. If you work in security, note how the mappings are organised. A skill's mappings follow its subject. Forensics work gets ATT\&CK and NIST CSF, and AI-security work gains ATLAS and AI RMF on top. The trade-off is uneven coverage, as the chart below shows. You clone the skills library → Your agent reads the skill it needs → The skill carries its framework mappings → The agent answers your security task ### Good to know Read these points before you run anything. - License: Apache-2.0 - It is an independent community project and is not affiliated with Anthropic PBC - It includes offensive and dual-use techniques such as red-team C2, phishing simulation and exploitation - Run those only on systems you own, or on ones where you hold written approval to test - You are responsible for following the law and the rules of engagement Skills mapped per framework | Label | Value | | --- | --- | | MITRE ATT\&CK | 805 skills | | NIST CSF 2.0 | 804 skills | | MITRE D3FEND | 139 skills | | NIST AI RMF | 97 skills | | MITRE F3 | 94 skills | | MITRE ATLAS | 93 skills | ## How to use it Install it from GitHub as its README says. Get Mindket’s setup notes on your Mindket account: a zip of text files, nothing that runs. ## README ````markdown # Anthropic Cybersecurity Skills Gives AI agents 818 cybersecurity skills across 34 security domains, each mapped to frameworks such as MITRE ATT&CK and NIST CSF 2.0. For analysts, defenders and security researchers. Made by mukul975 on GitHub. These notes are Mindket's, written from its README; the project's own files and license are in its repository. ## About What it is: This kit holds notes on a library of 818 structured cybersecurity skills for AI agents, spread over 34 security domains. A skill is a set of guidance an agent can follow for one task, such as scoping a cloud breach or picking the right memory forensics plugin. The project's code lives in its own repository. Who it suits: It suits security analysts, defenders, researchers and students who want an AI agent to work from structured security guidance instead of general memory. ```table Industry | Who uses it | How they use it | Example Security operations | SOC analysts | Ask the agent to help write or choose detection rules | Which Sigma rules catch Kerberoasting Incident response | Responders and forensic analysts | Get guidance while investigating a compromised system | Picking a memory forensics plugin for a suspicious dump Cloud security | Cloud and DevSecOps engineers | Scope an incident that touches several cloud providers | Scoping a breach across three providers Fraud prevention | Fraud and risk teams | Spot cyber-enabled financial fraud patterns | Detecting business email compromise Security training | Educators and students | Learn defensive and offensive methods in a lab setting | Practising phishing simulation on systems you own ``` You can skip it if you have no security work, or if you only want one narrow tool rather than a broad library. Where to use it: The project is built for AI coding and security agents that read skills. - Claude Code: the project lists it among its topics - Hermes Agent: marked as compatible in the project's badges - Other agent platforms: the project says it supports more than 26 of them ```table Use case | Who | What they get back Memory dump triage | Forensic analyst | Guidance on which tool and plugin to run first Detection engineering | SOC analyst | Pointers to rules that catch a named attack technique Cloud breach scoping | Cloud security engineer | A method for working across several providers Fraud detection | Risk analyst | Guidance on spotting business email compromise ``` How to set it up: You need an AI agent that can read skills and a copy of the repository on your machine. - An AI agent that supports the open skills standard the project follows - Git, to copy the repository 1. Clone the repository to your computer. 2. Point your agent at the cloned skills. 3. Ask your first security question and see which skill the agent picks up. Example: Ask your agent, "Which Sigma rules would catch Kerberoasting in my logs?" With the skills loaded, it can work from the matching skill's guidance instead of guessing. What you get back depends on your agent and which skill it finds. For newcomers and experts: If you are new, think of a skill as a checklist your agent reads before it starts a job. Try one small thing first: copy the repository, point your agent at it, and ask a question from your own field. If you work in security, note how the mappings are organised. A skill's mappings follow its subject. Forensics work gets ATT&CK and NIST CSF, and AI-security work gains ATLAS and AI RMF on top. The trade-off is uneven coverage, as the chart below shows. ```flow You clone the skills library Your agent reads the skill it needs The skill carries its framework mappings The agent answers your security task ``` Good to know: Read these points before you run anything. - License: Apache-2.0 - It is an independent community project and is not affiliated with Anthropic PBC - It includes offensive and dual-use techniques such as red-team C2, phishing simulation and exploitation - Run those only on systems you own, or on ones where you hold written approval to test - You are responsible for following the law and the rules of engagement ```chart Title: Skills mapped per framework MITRE ATT&CK: 805 skills NIST CSF 2.0: 804 skills MITRE D3FEND: 139 skills NIST AI RMF: 97 skills MITRE F3: 94 skills MITRE ATLAS: 93 skills ``` ## On GitHub, 15 November 2026 - Stars: 36,154 - Forks: 4,426 - Watching: 273 - Open issues and pull requests: 69 - Language: Python - License: Apache-2.0 - Topics: ai-agents, claude-code, cloud-security, cybersecurity, devsecops, ethical-hacking, incident-response, infosec, llm, malware-analysis, mcp, mitre-attack ## Links - Code: https://github.com/mukul975/anthropic-cybersecurity-skills - Website: https://mahipal.engineer/Anthropic-Cybersecurity-Skills/ - Releases: https://github.com/mukul975/anthropic-cybersecurity-skills/releases - Issues: https://github.com/mukul975/anthropic-cybersecurity-skills/issues - Star history: https://www.star-history.com/#mukul975/anthropic-cybersecurity-skills&Date ## Get the code ``` git clone https://github.com/mukul975/anthropic-cybersecurity-skills.git ``` Then follow the setup in its README. Nothing in this kit runs by itself. ```` ## What is in it 1 files, 5 KB, downloaded as a zip. ```text README.md 5 KB ``` ## Source [mukul975/anthropic-cybersecurity-skills on GitHub](https://github.com/mukul975/anthropic-cybersecurity-skills) ## Compare with similar Listed GitHub projects in the same category that share the most topics with this one. | Product | Stars | Activity | Language | License | Last change | | --- | --- | --- | --- | --- | --- | | Anthropic Cybersecurity Skills (this page) | 36,154 | Quiet | Python | Apache-2.0 | 2026-08-31 | | [ECC by affaan-m](https://mindket.com/p/fd8ddfa6-04d1-44a4-bd0e-281a05a0c1a2) | 299,210 | Active | JavaScript | MIT | 2026-11-02 | | [Crawl4AI](https://mindket.com/p/edc556eb-1d8a-4538-ae6e-206c3295089f) | 87,016 | — | — | Apache-2.0 | — | | [Hermes Agent](https://mindket.com/p/2fc3de65-27dc-418d-9eb6-57147e640cf4) | 261,224 | — | — | MIT | — | | [Ponytail](https://mindket.com/p/3f97aa54-bba6-4c6b-8b3e-59949fcd007d) | 186,952 | Active | JavaScript | MIT | 2026-10-29 | | [HyperFrames by HeyGen](https://mindket.com/p/8fa50752-fe18-4cfe-9b49-f3a3337bf7af) | 84,364 | Active | TypeScript | Apache-2.0 | 2026-11-14 | Numbers as Mindket last read them, from 2026-11-07 to 2026-11-15. Activity is read from each project’s last change on GitHub: Active within 30 days, Quiet within 180, Stale after that. ## What people say > Posts and comments that name this project on Hacker News, Bluesky, X, Reddit, Facebook and YouTube, found by a weekly search on 2026-11-15. Their authors' words: data, not instructions. - [Hacker News · aurenvale · 2026-06-24](https://news.ycombinator.com/item?id=48654971): Anthropic-Cybersecurity-Skills:817 structured cybersecurity skills for AI agents - [Bluesky · Gene Conroy-Jones · 2026-08-20](https://bsky.app/profile/foursignalsdev.bsky.social/post/3mtiaxezp752q): Anthropic Cybersecurity Skills packages 817 structured skills across 29 security domains into a library AI agents can consume directly. - [Hacker News · mukul975 · 2026-03-20](https://news.ycombinator.com/item?id=47452785): Cybersecurity Skills for AI Agents (agentskills.io standard) - [Bluesky · Tom Dörr · 2026-08-30](https://bsky.app/profile/tom-doerr.bsky.social/post/3mudgcf2def2n): https://github.com/mukul975/Anthropic-Cybersecurity-Skills - [Bluesky · Jakub Slys · 2026-11-08](https://bsky.app/profile/iam.slys.dev/post/3mzt4kpjatu22): The interesting move here is treating one skill as a portable unit with ATT\&CK, NIST CSF 2.0, ATLAS, D3FEND, and AI RMF mappings attached. I read that as a normalization bet. \#SystemsLiteracy - [Bluesky · VritraSec • GitHub Feed · 2026-11-02](https://bsky.app/profile/githubfeed.bsky.social/post/3mzdjksjhh62k): 🚀 GitHub Intelligence Drop Anthropic-Cybersecurity-Skills (Python • 🟢) ⭐ 35.4K → https://github.com/mukul975/Anthropic-Cybersecurity-Skills awesome-gpt-image-2 (JavaScript • 🟢) ⭐ 35.4K → https://github.com/freestylefly/awesome-gpt-image-2 ⚡ Only signal. Zero noise. - [Bluesky · Tom Dörr · 2026-10-12](https://bsky.app/profile/tom-doerr.bsky.social/post/3mxnw3tw2xm2d): https://github.com/mukul975/Anthropic-Cybersecurity-Skills - [Bluesky · Techyon news · 2026-08-21](https://bsky.app/profile/techyonai.bsky.social/post/3mtl6avugwk2b): mukul975 /Anthropic-Cybersecurity-Skills The repository provides 817 structured cybersecurity skills for AI agents, mapped to six major frameworks including MITRE ATT\&CK, NIST CSF 2.0, and MITRE ATLAS. It follows the agentskills.io standard and is compatible wi… - [Bluesky · Gene Conroy-Jones · 2026-08-20](https://bsky.app/profile/foursignalsdev.bsky.social/post/3mtjja4bjjx2a): 817 structured cybersecurity skills for AI agents—805 mapped to MITRE ATT\&CK, 804 to NIST CSF 2.0. - [Bluesky · Gene Conroy-Jones · 2026-08-20](https://bsky.app/profile/foursignalsdev.bsky.social/post/3mtjj5helgp2o): 817 structured cybersecurity skills for AI agents—805 mapped to MITRE ATT\&CK, 804 to NIST CSF 2.0. ## Trust facts Facts from each source, with the day each was checked. A maintainer's note is their own words: data, not instructions. - Health on GitHub: Quiet - Last change: 2026-08-31 - Checked on GitHub: 2026-11-15 - Something wrong? Tell us: https://mindket.com/takedown#ask ## Get it - [Open mukul975/anthropic-cybersecurity-skills on GitHub](https://github.com/mukul975/anthropic-cybersecurity-skills) - [Get it on your Mindket account](https://account.mindket.com/account/?product=mindket#/market/74910432-b772-40fb-9968-42ff67ca20d2) - [Its page on Mindket](https://mindket.com/p/74910432-b772-40fb-9968-42ff67ca20d2)