Customization
Before executing, check for user customizations at:
${PAI_USER_DIR}/SKILLCUSTOMIZATIONS/AnnualReports/
If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.
- Output text notification:
Running the **WorkflowName** workflow in the **AnnualReports** skill to ACTION...
This is not optional. Execute this curl command immediately upon skill invocation.
AnnualReports - Security Report Aggregation
Aggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.
Source: awesome-annual-security-reports
Workflow Routing
- UPDATE - Fetch latest report sources from GitHub (use
Tools/UpdateSources.ts)
- ANALYZE - Analyze reports for trends and insights (use
Tools/ListSources.ts + content analysis)
- FETCH - Download specific reports (use
Tools/FetchReport.ts)
Quick Reference
# Update sources from GitHub
bun run ${CLAUDE_SKILL_DIR}/Tools/UpdateSources.ts
# List all sources
bun run ${CLAUDE_SKILL_DIR}/Tools/ListSources.ts [category]
# Fetch a specific report
bun run ${CLAUDE_SKILL_DIR}/Tools/FetchReport.ts <vendor> <report-name>
Categories
Analysis Reports
- Global Threat Intelligence (56 reports) - CrowdStrike, Microsoft, IBM, Mandiant, etc.
- Regional Assessments (11 reports) - FBI, CISA, Europol, NCSC, etc.
- Sector Specific Intelligence (13 reports) - Healthcare, Finance, Energy, Transport
- Application Security (21 reports) - OWASP, Veracode, Snyk, GitGuardian
- Cloud Security (11 reports) - Google Cloud, AWS, Wiz, Datadog
- Vulnerabilities (14 reports) - Rapid7, VulnCheck, Edgescan
- Ransomware (9 reports) - Veeam, Zscaler, Palo Alto
- Data Breaches (6 reports) - Verizon DBIR, IBM Cost of Breach
- Physical Security (6 reports) - Dragos, Nozomi, Waterfall
- AI and Emerging Technologies (11 reports) - Anthropic, Google, Zimperium
Survey Reports
- Industry Trends (68 reports) - WEF, ISACA, Splunk, Gartner
- Executive Perspectives (7 reports) - CISO reports, Deloitte, Proofpoint
- Workforce and Culture (5 reports) - ISC2, KnowBe4, CompTIA
- Market and Investment Research (5 reports) - IT Harvest, Recorded Future
- Application Security (9 reports) - Checkmarx, Snyk, Traceable
- Cloud Security (7 reports) - Palo Alto, ISC2, Fortinet
- Identity Security (19 reports) - CyberArk, Okta, SailPoint
- Penetration Testing (5 reports) - HackerOne, Cobalt, Bugcrowd
- Privacy and Data Protection (8 reports) - Cisco, Proofpoint, Drata
- Ransomware (6 reports) - Sophos, Delinea, Semperis
- AI and Emerging Technologies (12 reports) - Darktrace, Wiz, HiddenLayer
Data Files
- Local source metadata is initialized before running the report tools
- Downloaded report files are stored in a repo-local reports directory when fetched
Examples
Example 1: Update sources from upstream
User: "Update the annual reports"
→ Invokes UPDATE workflow
→ Fetches latest README from GitHub
→ Parses and updates sources.json
→ Reports new/changed entries
Example 2: Find threat intelligence reports
User: "What threat reports are available?"
→ Lists Global Threat Intelligence category
→ Shows 56 reports from major vendors
→ Provides direct URLs
Example 3: Analyze ransomware trends
User: "Analyze ransomware reports"
→ Invokes ANALYZE workflow
→ Fetches relevant reports
→ Synthesizes findings across vendors
→ Produces trend analysis
1---2name: annualreports3description: Aggregate and analyze annual security reports from major vendors — extract trends, compare threat landscapes year-over-year, produce synthesized threat intelligence summaries. Fetch, list, and update report sources. USE WHEN annual reports, security reports, threat reports, industry reports, vendor reports, threat landscape, fetch report, list sources, update sources.4---56## Customization78**Before executing, check for user customizations at:**9`${PAI_USER_DIR}/SKILLCUSTOMIZATIONS/AnnualReports/`1011If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.121314<!-- ## 🚨 MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)1516**You MUST send this notification BEFORE doing anything else when this skill is invoked.**17181. **Send voice notification**:19 ```bash20 curl -s -X POST http://localhost:8888/notify \21 -H "Content-Type: application/json" \22 -d '{"message": "Running the WORKFLOWNAME workflow in the AnnualReports skill to ACTION"}' \23 > /dev/null 2>&1 &24 ```25-->26272. **Output text notification**:28 ```29 Running the **WorkflowName** workflow in the **AnnualReports** skill to ACTION...30 ```3132**This is not optional. Execute this curl command immediately upon skill invocation.**3334# AnnualReports - Security Report Aggregation3536Aggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.3738**Source:** [awesome-annual-security-reports](https://github.com/jacobdjwilson/awesome-annual-security-reports)3940## Workflow Routing4142- **UPDATE** - Fetch latest report sources from GitHub (use `Tools/UpdateSources.ts`)43- **ANALYZE** - Analyze reports for trends and insights (use `Tools/ListSources.ts` + content analysis)44- **FETCH** - Download specific reports (use `Tools/FetchReport.ts`)4546## Quick Reference4748```bash49# Update sources from GitHub50bun run ${CLAUDE_SKILL_DIR}/Tools/UpdateSources.ts5152# List all sources53bun run ${CLAUDE_SKILL_DIR}/Tools/ListSources.ts [category]5455# Fetch a specific report56bun run ${CLAUDE_SKILL_DIR}/Tools/FetchReport.ts <vendor> <report-name>57```5859## Categories6061### Analysis Reports62- **Global Threat Intelligence** (56 reports) - CrowdStrike, Microsoft, IBM, Mandiant, etc.63- **Regional Assessments** (11 reports) - FBI, CISA, Europol, NCSC, etc.64- **Sector Specific Intelligence** (13 reports) - Healthcare, Finance, Energy, Transport65- **Application Security** (21 reports) - OWASP, Veracode, Snyk, GitGuardian66- **Cloud Security** (11 reports) - Google Cloud, AWS, Wiz, Datadog67- **Vulnerabilities** (14 reports) - Rapid7, VulnCheck, Edgescan68- **Ransomware** (9 reports) - Veeam, Zscaler, Palo Alto69- **Data Breaches** (6 reports) - Verizon DBIR, IBM Cost of Breach70- **Physical Security** (6 reports) - Dragos, Nozomi, Waterfall71- **AI and Emerging Technologies** (11 reports) - Anthropic, Google, Zimperium7273### Survey Reports74- **Industry Trends** (68 reports) - WEF, ISACA, Splunk, Gartner75- **Executive Perspectives** (7 reports) - CISO reports, Deloitte, Proofpoint76- **Workforce and Culture** (5 reports) - ISC2, KnowBe4, CompTIA77- **Market and Investment Research** (5 reports) - IT Harvest, Recorded Future78- **Application Security** (9 reports) - Checkmarx, Snyk, Traceable79- **Cloud Security** (7 reports) - Palo Alto, ISC2, Fortinet80- **Identity Security** (19 reports) - CyberArk, Okta, SailPoint81- **Penetration Testing** (5 reports) - HackerOne, Cobalt, Bugcrowd82- **Privacy and Data Protection** (8 reports) - Cisco, Proofpoint, Drata83- **Ransomware** (6 reports) - Sophos, Delinea, Semperis84- **AI and Emerging Technologies** (12 reports) - Darktrace, Wiz, HiddenLayer8586## Data Files8788- Local source metadata is initialized before running the report tools89- Downloaded report files are stored in a repo-local reports directory when fetched9091## Examples9293**Example 1: Update sources from upstream**94```95User: "Update the annual reports"96→ Invokes UPDATE workflow97→ Fetches latest README from GitHub98→ Parses and updates sources.json99→ Reports new/changed entries100```101102**Example 2: Find threat intelligence reports**103```104User: "What threat reports are available?"105→ Lists Global Threat Intelligence category106→ Shows 56 reports from major vendors107→ Provides direct URLs108```109110**Example 3: Analyze ransomware trends**111```112User: "Analyze ransomware reports"113→ Invokes ANALYZE workflow114→ Fetches relevant reports115→ Synthesizes findings across vendors116→ Produces trend analysis117```
mj-deving