# mukul975/Anthropic-Cybersecurity-Skills

> A library of 818 structured cybersecurity skills for AI agents, mapped to six frameworks (MITRE ATT&CK, NIST CSF 2.0, ATLAS, D3FEND, NIST AI RMF, MITRE F3) and compatible with Claude Code, Copilot, Cursor and other platforms.

- Magnitude: 3.1 out of 10 — Steady
- Stars: 33,255 total · +23 stars today, ≈ 52 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Python · License: Apache-2.0 · Created: 2026-02-25 · Last push: 2026-08-31
- GitHub: https://github.com/mukul975/Anthropic-Cybersecurity-Skills · Homepage: https://mahipal.engineer/Anthropic-Cybersecurity-Skills/ · Page: https://gitnova.dev/en/r/mukul975/Anthropic-Cybersecurity-Skills

## Useful for

- Attach the library to an AI agent so it suggests the right Volatility3 plugins for a memory dump analysis
- Find Sigma rules for detecting Kerberoasting via skills in the detection domain
- Map an incident to MITRE ATT&CK tactics and NIST CSF 2.0 requirements for a report

## Why it’s here

- 23 stars so far today, about 52 expected by the end of the day.
- Over the last two days the pace is 1.6× that of the previous week and a half.
- GitHub Trending Python today: #12, +98 stars.
- About 17 forks a day — people are taking the code.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 4,038
- Issues and pull requests: 124
- Watchers: 263
- Average over the last week: 62 per day
- Usual pace: 85 per day
- Stars in the last hour (measured): 1
- Latest release: v1.3.0 (2026-06-22)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-08-25 … 2026-09-23: 133, 153, 121, 122, 115, 110, 117, 95, 99, 85, 57, 75, 67, 69, 69, 83, 69, 57, 46, 55, 50, 49, 54, 48, 44, 35, 45, 102, 105, 23

## Spotted in now

- GitHub Trending Python today: #12, +98 stars

## More in this category

1. **mvt-project/mvt** — 6.8 · Breakout · Security · Python · +105 stars today, ≈ 250 by evening
   A collection of mobile forensics utilities that gather and analyze traces of compromise on Android and iOS devices, matching them against public indicators of compromise (IOCs). Built by Amnesty International Security Lab for…
   Full card: https://gitnova.dev/en/r/mvt-project/mvt.md
2. **newliver666/apk-reverse** — 6.2 · Early signal · Security · Python · +171 stars today, ≈ 294 by evening
   An Agent Skill for Android APK reverse engineering: unpacking, ad removal, dex patching, repacking, and runtime/server analysis. Loaded by an agent (Claude Code, Codex) while it works.
   Full card: https://gitnova.dev/en/r/newliver666/apk-reverse.md
3. **cloudflare/security-audit-skill** — 4.8 · Peaking · Security · JavaScript · +246 stars today, ≈ 553 by evening
   A coding-agent skill that turns the agent into a security auditor, running a multi-phase code audit with independently verified, machine-readable findings.
   Full card: https://gitnova.dev/en/r/cloudflare/security-audit-skill.md
4. **calesthio/Crucix** — 3.4 · Breakout · Security · JavaScript · +15 stars today, ≈ 36 by evening
   A local OSINT terminal that aggregates 27 open-source feeds (satellites, radiation, flights, markets, conflicts, social) into a single Jarvis-style dashboard with a 3D globe, refreshing every 15 minutes.
   Full card: https://gitnova.dev/en/r/calesthio/Crucix.md
5. **ejfkdev/ddc** — 3.2 · Cooling · Security · Rust · +9 stars today, ≈ 20 by evening
   A Rust DEX-to-Java decompiler for Android with progressive analysis: query metadata first and decompile classes on demand instead of a full run. Its output is javac-verified across seven real-world APKs.
   Full card: https://gitnova.dev/en/r/ejfkdev/ddc.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-23 13:41 UTC, updated every 30 minutes.