Overview
Anthropic-Cybersecurity-Skills is a community-maintained library — by Mahipal Jangra, not by Anthropic — of more than 800 structured cybersecurity skills written for AI agents rather than for people. Each skill is a directory built to the agentskills.io standard: a `SKILL.md` with YAML frontmatter that makes it discoverable, plus optional `references/`, `scripts/` and `assets/` folders holding standards mappings, helper code and templates.
The frontmatter is what makes the collection searchable by an agent: `name`, `description`, `domain`, `subdomain`, `tags` and framework identifiers such as `atlas_techniques`, `d3fend_techniques`, `nist_ai_rmf` and `nist_csf`. Every skill body follows the same four sections — When to Use, Prerequisites, Workflow (step-by-step commands) and Verification — so an agent gets a runnable procedure instead of prose.
The library's distinguishing feature is its framework coverage. Skills are mapped to MITRE ATT&CK v19.1 across 15 tactics, NIST CSF 2.0's six functions, MITRE ATLAS for adversarial ML techniques, MITRE D3FEND for defensive countermeasures, NIST AI RMF 1.0 for AI governance, and MITRE F3 for cyber-enabled financial fraud. Because it targets the agentskills.io standard rather than one vendor's format, it loads without configuration into Claude Code, GitHub Copilot, Cursor, Windsurf, Cline, Aider, Continue, Codex CLI, Gemini CLI and other compatible harnesses. It is Apache-2.0 licensed.
What it does
- 800+ skills across security domains from cloud and application security to blockchain and fraud
- Built to the agentskills.io standard — YAML frontmatter for discovery, markdown workflow for execution
- Mappings to six frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, MITRE D3FEND, NIST AI RMF and MITRE F3
- Consistent skill shape — When to Use, Prerequisites, Workflow, Verification — so procedures are runnable, not narrative
- Loads with zero configuration into any agentskills.io-compatible assistant, CLI agent or framework
- Apache-2.0 licensed, so it can be vendored into internal security tooling
Getting started
Install the skills into a project with the `skills` CLI, or clone the repository if you want to read and adapt them.
Add the skills
The recommended path installs straight from GitHub.
npx skills add mukul975/Anthropic-Cybersecurity-SkillsOr clone the repository
Useful when you want to trim the set or fork skills for an internal standard.
git clone https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
cd Anthropic-Cybersecurity-SkillsInvoke one from your agent
With the skills installed, ask the agent for the task by name — it matches on the `description` and `tags` in each skill's frontmatter, then follows that skill's Workflow and Verification sections.
Run the threat-modelling skill against this service and map the findings to NIST CSF 2.0Commands and code are distilled from the project's own documentation — always check the official repo for the latest.
When to use it
- Give a coding agent a repeatable procedure for a security task instead of improvised advice
- Produce findings already mapped to ATT&CK, D3FEND or NIST CSF for a compliance write-up
- Cover AI-specific threats with the ATLAS and NIST AI RMF mappings when reviewing an ML system
- Fork a subset into an internal skill pack that matches your own security standards
How Anthropic-Cybersecurity-Skills compares
Anthropic-Cybersecurity-Skills alongside other open-source agent skills & plugins tools AI/TLDR tracks, ranked by GitHub stars.
| Tool | Stars | What it does |
|---|---|---|
| Superpowers | ★ 284k | A composable skills plugin that installs a spec-first, TDD, subagent-driven development methodology into Claude Code, Codex, Cursor, Gemini CLI and other coding harnesses. |
| Skills for Real Engineers | ★ 258k | Matt Pocock's everyday agent skills for coding agents, covering alignment grilling, planning, code review and research — small, composable and meant to be edited. |
| ECC | ★ 255k | An installable plugin that adds 68 agents, 286 skills, hooks, rules, memory and an agent-config security scanner to Claude Code, Codex and other coding harnesses. |
| Addy’s Agent Skills | ★ 93.1k | A pack of production engineering skills for AI coding agents, with nine lifecycle slash commands — /spec, /plan, /build, /test, /review, /ship — installable into 70+ agents. |
| Humanizer | ★ 45.8k | An agent skill that rewrites AI-sounding prose against a list of 25 named writing patterns, grouped into five sections and applied without changing the claims in the text. |
| Claude for Financial Services | ★ 34.8k | Anthropic reference agents, skills and MCP connectors for investment banking, equity research, private equity and wealth management, as Cowork plugins or Managed Agents. |
| Anthropic-Cybersecurity-Skills | ★ 32.5k | A framework-mapped security skill library for coding agents |
| ARIS | ★ 15.9k | A Markdown-only skill pack that turns a coding agent into an autonomous research loop, with a second model acting as adversarial reviewer and a persistent research wiki. |