Customization
Before executing, check for user customizations at:
~/.claude/skills/CORE/USER/SKILLCUSTOMIZATIONS/AnnualReports/
If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.
🚨 MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)
You MUST send this notification BEFORE doing anything else when this skill is invoked.
Send voice notification:
curl -s -X POST http://localhost:8888/notify \
-H "Content-Type: application/json" \
-d '{"message": "Running the WORKFLOWNAME workflow in the AnnualReports skill to ACTION"}' \
> /dev/null 2>&1 &
Output text notification:
Running the **WorkflowName** workflow in the **AnnualReports** skill to ACTION...
This is not optional. Execute this curl command immediately upon skill invocation.
AnnualReports - Security Report Aggregation
Aggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.
Source: awesome-annual-security-reports
Workflow Routing
- UPDATE - Fetch latest report sources from GitHub →
Workflows/Update.md
- ANALYZE - Analyze reports for trends and insights →
Workflows/Analyze.md
- FETCH - Download specific reports →
Workflows/Fetch.md
Quick Reference
# Update sources from GitHub
bun run ~/.claude/skills/AnnualReports/Tools/UpdateSources.ts
# List all sources
bun run ~/.claude/skills/AnnualReports/Tools/ListSources.ts [category]
# Fetch a specific report
bun run ~/.claude/skills/AnnualReports/Tools/FetchReport.ts <vendor> <report-name>
Categories
Analysis Reports
- Global Threat Intelligence (56 reports) - CrowdStrike, Microsoft, IBM, Mandiant, etc.
- Regional Assessments (11 reports) - FBI, CISA, Europol, NCSC, etc.
- Sector Specific Intelligence (13 reports) - Healthcare, Finance, Energy, Transport
- Application Security (21 reports) - OWASP, Veracode, Snyk, GitGuardian
- Cloud Security (11 reports) - Google Cloud, AWS, Wiz, Datadog
- Vulnerabilities (14 reports) - Rapid7, VulnCheck, Edgescan
- Ransomware (9 reports) - Veeam, Zscaler, Palo Alto
- Data Breaches (6 reports) - Verizon DBIR, IBM Cost of Breach
- Physical Security (6 reports) - Dragos, Nozomi, Waterfall
- AI and Emerging Technologies (11 reports) - Anthropic, Google, Zimperium
Survey Reports
- Industry Trends (68 reports) - WEF, ISACA, Splunk, Gartner
- Executive Perspectives (7 reports) - CISO reports, Deloitte, Proofpoint
- Workforce and Culture (5 reports) - ISC2, KnowBe4, CompTIA
- Market and Investment Research (5 reports) - IT Harvest, Recorded Future
- Application Security (9 reports) - Checkmarx, Snyk, Traceable
- Cloud Security (7 reports) - Palo Alto, ISC2, Fortinet
- Identity Security (19 reports) - CyberArk, Okta, SailPoint
- Penetration Testing (5 reports) - HackerOne, Cobalt, Bugcrowd
- Privacy and Data Protection (8 reports) - Cisco, Proofpoint, Drata
- Ransomware (6 reports) - Sophos, Delinea, Semperis
- AI and Emerging Technologies (12 reports) - Darktrace, Wiz, HiddenLayer
Data Files
Data/sources.json - All report sources with metadataReports/ - Downloaded report files (PDFs, markdown)
Examples
Example 1: Update sources from upstream
User: "Update the annual reports"
→ Invokes UPDATE workflow
→ Fetches latest README from GitHub
→ Parses and updates sources.json
→ Reports new/changed entries
Example 2: Find threat intelligence reports
User: "What threat reports are available?"
→ Lists Global Threat Intelligence category
→ Shows 56 reports from major vendors
→ Provides direct URLs
Example 3: Analyze ransomware trends
User: "Analyze ransomware reports"
→ Invokes ANALYZE workflow
→ Fetches relevant reports
→ Synthesizes findings across vendors
→ Produces trend analysis
1---2name: annualreports3description: Annual security report aggregation and analysis. USE WHEN annual reports, security reports, threat reports, industry reports, update reports, analyze reports, vendor reports, threat landscape.4---5
6## Customization
7
8**Before executing, check for user customizations at:**
9`~/.claude/skills/CORE/USER/SKILLCUSTOMIZATIONS/AnnualReports/`
10
11If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.
12
13
14## 🚨 MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)
15
16**You MUST send this notification BEFORE doing anything else when this skill is invoked.**
17
181. **Send voice notification**:
19 ```bash
20 curl -s -X POST http://localhost:8888/notify \
21 -H "Content-Type: application/json" \
22 -d '{"message": "Running the WORKFLOWNAME workflow in the AnnualReports skill to ACTION"}' \
23 > /dev/null 2>&1 &
24 ```
25
262. **Output text notification**:
27 ```
28 Running the **WorkflowName** workflow in the **AnnualReports** skill to ACTION...
29 ```
30
31**This is not optional. Execute this curl command immediately upon skill invocation.**
32
33# AnnualReports - Security Report Aggregation
34
35Aggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.
36
37**Source:** [awesome-annual-security-reports](https://github.com/jacobdjwilson/awesome-annual-security-reports)
38
39## Workflow Routing
40
41- **UPDATE** - Fetch latest report sources from GitHub → `Workflows/Update.md`
42- **ANALYZE** - Analyze reports for trends and insights → `Workflows/Analyze.md`
43- **FETCH** - Download specific reports → `Workflows/Fetch.md`
44
45## Quick Reference
46
47```bash
48# Update sources from GitHub
49bun run ~/.claude/skills/AnnualReports/Tools/UpdateSources.ts
50
51# List all sources
52bun run ~/.claude/skills/AnnualReports/Tools/ListSources.ts [category]
53
54# Fetch a specific report
55bun run ~/.claude/skills/AnnualReports/Tools/FetchReport.ts <vendor> <report-name>
56```
57
58## Categories
59
60### Analysis Reports
61- **Global Threat Intelligence** (56 reports) - CrowdStrike, Microsoft, IBM, Mandiant, etc.
62- **Regional Assessments** (11 reports) - FBI, CISA, Europol, NCSC, etc.
63- **Sector Specific Intelligence** (13 reports) - Healthcare, Finance, Energy, Transport
64- **Application Security** (21 reports) - OWASP, Veracode, Snyk, GitGuardian
65- **Cloud Security** (11 reports) - Google Cloud, AWS, Wiz, Datadog
66- **Vulnerabilities** (14 reports) - Rapid7, VulnCheck, Edgescan
67- **Ransomware** (9 reports) - Veeam, Zscaler, Palo Alto
68- **Data Breaches** (6 reports) - Verizon DBIR, IBM Cost of Breach
69- **Physical Security** (6 reports) - Dragos, Nozomi, Waterfall
70- **AI and Emerging Technologies** (11 reports) - Anthropic, Google, Zimperium
71
72### Survey Reports
73- **Industry Trends** (68 reports) - WEF, ISACA, Splunk, Gartner
74- **Executive Perspectives** (7 reports) - CISO reports, Deloitte, Proofpoint
75- **Workforce and Culture** (5 reports) - ISC2, KnowBe4, CompTIA
76- **Market and Investment Research** (5 reports) - IT Harvest, Recorded Future
77- **Application Security** (9 reports) - Checkmarx, Snyk, Traceable
78- **Cloud Security** (7 reports) - Palo Alto, ISC2, Fortinet
79- **Identity Security** (19 reports) - CyberArk, Okta, SailPoint
80- **Penetration Testing** (5 reports) - HackerOne, Cobalt, Bugcrowd
81- **Privacy and Data Protection** (8 reports) - Cisco, Proofpoint, Drata
82- **Ransomware** (6 reports) - Sophos, Delinea, Semperis
83- **AI and Emerging Technologies** (12 reports) - Darktrace, Wiz, HiddenLayer
84
85## Data Files
86
87- `Data/sources.json` - All report sources with metadata
88- `Reports/` - Downloaded report files (PDFs, markdown)
89
90## Examples
91
92**Example 1: Update sources from upstream**
93```
94User: "Update the annual reports"
95→ Invokes UPDATE workflow
96→ Fetches latest README from GitHub
97→ Parses and updates sources.json
98→ Reports new/changed entries
99```
100
101**Example 2: Find threat intelligence reports**
102```
103User: "What threat reports are available?"
104→ Lists Global Threat Intelligence category
105→ Shows 56 reports from major vendors
106→ Provides direct URLs
107```
108
109**Example 3: Analyze ransomware trends**
110```
111User: "Analyze ransomware reports"
112→ Invokes ANALYZE workflow
113→ Fetches relevant reports
114→ Synthesizes findings across vendors
115→ Produces trend analysis
116```
majiayu000