Agent Skills

Performing Threat Modeling with OWASP Threat Dragon

Anthropic Cybersecurity Skills

Use OWASP Threat Dragon to create data-flow diagrams, apply STRIDE/LINDDUN threat classifications, and generate threat-model reports to guide secure design revi

Scanner Skill — Decepticon

decepticon

High-volume codebase scanner that shards work, ranks suspicious locations, and promotes a concise set of candidates for deeper analysis.

Tabletop Exercise Designer

Arcanum Tabletop Exercises

Design and generate CISA-aligned cybersecurity tabletop exercises, facilitator guides, participant materials, technical atomics, and SOP gap analyses for incide

Analyzing Ransomware Leak Site Intelligence

Anthropic Cybersecurity Skills

Collect and analyze ransomware data-leak site (DLS) postings to extract victim, group, sector, and timeline intelligence for threat hunting and risk assessment.

Evaluating Threat Intelligence Platforms

Anthropic Cybersecurity Skills

Guides procurement, evaluation, and proof-of-concept testing for Threat Intelligence Platforms (MISP, OpenCTI, ThreatConnect, Anomali, EclecticIQ) based on inte

Conducting Domain Persistence with DCSync

Anthropic Cybersecurity Skills

Guided procedures to identify DCSync-capable accounts and extract Active Directory credential hashes (KRBTGT, admin) for authorized red-team testing and validat

Performing SSL/TLS Security Assessment

xalgorix

Use sslyze to assess SSL/TLS server configurations: supported protocols, cipher suites, certificate chains, HSTS/OCSP, and common vulnerabilities like Heartblee

Identity Access Management (NIS2)

claude-fuer-deutsches-recht

Assess IAM for users, roles, groups and applications to support NIS2 cybersecurity compliance and operational decisions.

NIST SP 800-30 Cyber Risk Assessment

Anthropic Cybersecurity Skills

Conducts comprehensive cybersecurity risk assessments using the NIST SP 800-30 Rev 1 methodology to identify threats, vulnerabilities, and impact.

Immutable Backup with Restic

asi

Implements ransomware-resistant backup strategies using Restic with S3-compatible object locking for tamper-proof data protection.

CISO Advisor

claude-skills

Provides risk-based security strategy and compliance roadmaps (SOC 2, ISO 27001, HIPAA, GDPR), incident response playbooks, and vendor risk assessments for grow

Testing for XSS Vulnerabilities with Burp Suite

Anthropic Cybersecurity Skills

Guided workflow to identify, validate, and document reflected, stored, and DOM-based XSS using Burp Suite (scanner, repeater, intruder, DOM Invader).

Hunting for Cobalt Strike Beacons

Anthropic Cybersecurity Skills

Detect Cobalt Strike beacon network activity using TLS certificate signatures, JA3/JA3S/JARM fingerprints, HTTP profile matching, and timing analysis in Zeek/Su

Building Threat Hunt Hypothesis Framework

xalgorix

Framework and workflow to turn threat intelligence and telemetry into testable, falsifiable threat-hunting hypotheses for proactive detection.