Masriyan/Claude-Code-CyberSecurity-Skill

22 production-quality Claude Code Skills for cybersecurity professionals — covering offensive security, defensive operations, reverse engineering, threat hunting, threat intelligence, purple team / adversary emulation, CSOC automation, AI/LLM security, mobile, OT/ICS, GRC, software supply chain security, and more.

What it solves

This project provides a comprehensive collection of 22 specialized "skills" for Claude Code, transforming the AI assistant into a cybersecurity co-pilot. It solves the problem of generic AI responses by providing structured methodologies, decision frameworks, and automation scripts tailored for professional security operations, ranging from offensive red-teaming to defensive blue-teaming and GRC compliance.

How it works

The project consists of SKILL.md files that are installed into Claude Code's global or project-specific skills directory. When Claude reads these files at the start of a conversation, it gains domain-specific expertise. Each skill includes:

  • YAML frontmatter for identification.
  • Activation triggers to help Claude recognize when to use the skill.
  • Step-by-step methodologies for the AI to follow natively.
  • Output templates for consistent reports and artifacts.
  • Python automation scripts that Claude can execute via its bash tool to perform real-world security tasks.

Who it’s for

This toolkit is designed for cybersecurity professionals, including penetration testers, SOC analysts, incident responders, malware analysts, and GRC auditors, as well as CTF competitors and security researchers.

Highlights

  • Broad Domain Coverage: Covers 22 distinct areas including AI/LLM security, OT/ICS/SCADA, mobile security, and supply chain security.
  • Native Integration: Leverages Claude Code's ability to read files, run bash commands, and perform web searches without copy-pasting.
  • Safety Gates: Includes built-in authorization prompts for high-risk or offensive skills to ensure legal and ethical use.
  • Automation Ready: Provides accompanying Python scripts for tasks like IOC extraction, vulnerability scanning, and report generation.
  • Framework Aligned: Grounded in industry standards like MITRE ATT&CK, OWASP Top 10, NIST CSF 2.0, and ISO 27001.

Related

  • Project
    Prorise-cool/Claude-Code-Multi-Agent

    Claude Code Multi‑Agent is an open‑source framework that gives Anthropic’s Claude Code project awareness and expert‑agent capabilities. It uses a Python Hook system and a locally‑run Ollama model to automatically detect the codebase type, analyse user intent, load 300+ domain‑specific “Skills” (backend, frontend, testing, security, etc.), and enforce automatic documentation (DEVELOPMENT.md, KNOWLEDGE.md, CHANGELOG.md). After cloning, installing Ollama, a model, and uv, you drop your project into the repo and Claude Code instantly knows its context, suggests appropriate tools, and can be driven with slash commands like `/backend‑specialist` or workflow commands such as `/kiro/spec`. Key points: - Zero‑config start; all configuration lives in `.claude/settings.json` and `prompts.json`. - Hooks run on session start, user prompt, tool use, etc., handling project detection, intent analysis, and doc updates. - Skills are defined by `SKILL.md` files and are auto‑discovered. - Works entirely locally (no external API), integrates with Git, and is MIT‑licensed. Ideal for developers or small teams who want a reproducible, on‑premise AI coding assistant.

  • Project
    pedrohcgs/claude-code-my-workflow

    A ready-to-fork foundation for AI-assisted academic work that uses Claude Code to automate the planning, creation, and verification of research papers, slides, and data analysis.

  • Project
    wesammustafa/Claude-Code-Everything-You-Need-to-Know

    A practical, up‑to‑date guide for Anthropic’s Claude Code CLI, covering installation, prompt engineering, custom slash‑commands (Skills), automatic Hooks, sub‑agents, JavaScript workflows, and the Model‑Context‑Protocol for external tool integration. Includes ready‑to‑copy `.claude/` examples for teams building AI‑augmented development pipelines.

  • Project
    rampstackco/claude-skills

    A library of 103 opinionated Claude Skills that provide a structured framework for building, launching, and growing brands and websites across any web stack.

  • Project
    agamm/claude-code-owasp

    A Claude Code skill that integrates the latest OWASP security standards (2025-2026) to help developers perform accurate security reviews and build secure AI agent systems.