# Cybersecurity Skillset Index

> Use the open-source Anthropic Cybersecurity Skills library as a searchable cybersecurity knowledge base for authorized defensive work, cloud security, threat hunting, incident response, forensics, web/mobile/app security, compliance, honeytokens, AI security, and security documentation. Do not use for unauthorized intrusion or harmful activity.

- Skill: `emaddawood1991-tech/cybersecurity-skillset-index` (Agent Skill)
- Install (CLI): `npx skillmds@latest add emaddawood1991-tech/cybersecurity-skillset-index`
- Raw SKILL.md: https://api.skillmd.com/api/skills/emaddawood1991-tech/cybersecurity-skillset-index/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: emaddawood1991-tech (https://skillmd.com/u/emaddawood1991-tech)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/emaddawood1991-tech/cybersecurity-skillset-index

---


# Cybersecurity Skillset Index

Use this skill as a safe router into the open-source `mukul975/Anthropic-Cybersecurity-Skills` repository.

Upstream source:

`https://github.com/mukul975/Anthropic-Cybersecurity-Skills`

## Safety rule

Only help with cybersecurity work that is authorized, defensive, educational, or clearly scoped to systems the user owns or has permission to test.

Refuse or redirect requests that ask for credential theft, persistence on third-party systems, evasion for abuse, phishing against real targets, malware deployment, data exfiltration, or unauthorized exploitation.

When a task is dual-use, keep the response focused on:

- defensive understanding;
- lab or sandbox use;
- detection and hardening;
- incident response;
- safe validation;
- documentation and checklists.

## How to use the library

1. Identify the security domain and user goal.
2. Search the local or cloned repository for relevant `SKILL.md` files.
3. Read only the most relevant skill files before answering.
4. Prefer defensive workflows and verification steps.
5. Explain assumptions and risks clearly.
6. Provide practical outputs: checklists, queries, detection logic, remediation plans, incident reports, architecture reviews, or learning plans.

## Useful search patterns

```bash
rg --files skills
rg -i "honeytoken|deception" skills
rg -i "threat hunting|kubernetes|azure|phishing|forensics|mobile" skills
rg -i "mitre_attack|nist_csf|d3fend|atlas|ai_rmf|mitre_f3" skills
```

## Recommended outputs

For security reviews:

- Scope and assumptions
- Relevant skill(s) used
- Findings
- Risk level
- Evidence to collect
- Recommended fixes
- Verification steps
- Automation opportunities

For learning:

- Skill path
- What it teaches
- Prerequisites
- Safe lab setup
- Practice task
- Defensive takeaway

For business/security operations:

- Policy/checklist
- SOP
- Incident-response playbook
- Detection and monitoring plan
- Tooling recommendations
- Executive summary