How do I install the Annualreports skill?

Run npx skillmds@latest add sheshiyer/annualreports in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Annualreports safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Annualreports?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Annualreports free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Annualreports?

Sheshiyer (@sheshiyer) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Annualreports by sheshiyer — Agent Skill

Name: Annualreports
Author: Sheshiyer

File contents

AnnualReports - Security Report Aggregation

Aggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.

Source: awesome-annual-security-reports

Workflow Routing

UPDATE - Fetch latest report sources from GitHub → Workflows/Update.md
ANALYZE - Analyze reports for trends and insights → Workflows/Analyze.md
FETCH - Download specific reports → Workflows/Fetch.md

Quick Reference

Run from this skill's directory:

# Update sources from GitHub
bun run Tools/UpdateSources.ts

# List all sources
bun run Tools/ListSources.ts [category]

# Fetch a specific report
bun run Tools/FetchReport.ts <vendor> <report-name>

Data Files

Data/sources.json - All report sources with metadata
Reports/ - Downloaded report files (PDFs, markdown)

Examples

Example 1: Update sources from upstream

User: "Update the annual reports"
→ Invokes UPDATE workflow
→ Fetches latest README from GitHub
→ Parses and updates sources.json
→ Reports new/changed entries

Example 2: Find threat intelligence reports

User: "What threat reports are available?"
→ Lists Global Threat Intelligence category
→ Shows 56 reports from major vendors
→ Provides direct URLs

Example 3: Analyze ransomware trends

User: "Analyze ransomware reports"
→ Invokes ANALYZE workflow
→ Fetches relevant reports
→ Synthesizes findings across vendors
→ Produces trend analysis

---name: annualreportsdescription: Annual security report aggregation and analysis. USE WHEN annual reports, security reports, threat reports, industry reports, update reports, analyze reports, vendor reports, threat landscape.---# AnnualReports - Security Report AggregationAggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.**Source:** [awesome-annual-security-reports](https://github.com/jacobdjwilson/awesome-annual-security-reports)## Workflow Routing- **UPDATE** - Fetch latest report sources from GitHub → `Workflows/Update.md`- **ANALYZE** - Analyze reports for trends and insights → `Workflows/Analyze.md`- **FETCH** - Download specific reports → `Workflows/Fetch.md`## Quick ReferenceRun from this skill's directory:```bash# Update sources from GitHubbun run Tools/UpdateSources.ts# List all sourcesbun run Tools/ListSources.ts [category]# Fetch a specific reportbun run Tools/FetchReport.ts <vendor> <report-name>```## Categories### Analysis Reports- **Global Threat Intelligence** (56 reports) - CrowdStrike, Microsoft, IBM, Mandiant, etc.- **Regional Assessments** (11 reports) - FBI, CISA, Europol, NCSC, etc.- **Sector Specific Intelligence** (13 reports) - Healthcare, Finance, Energy, Transport- **Application Security** (21 reports) - OWASP, Veracode, Snyk, GitGuardian- **Cloud Security** (11 reports) - Google Cloud, AWS, Wiz, Datadog- **Vulnerabilities** (14 reports) - Rapid7, VulnCheck, Edgescan- **Ransomware** (9 reports) - Veeam, Zscaler, Palo Alto- **Data Breaches** (6 reports) - Verizon DBIR, IBM Cost of Breach- **Physical Security** (6 reports) - Dragos, Nozomi, Waterfall- **AI and Emerging Technologies** (11 reports) - Anthropic, Google, Zimperium### Survey Reports- **Industry Trends** (68 reports) - WEF, ISACA, Splunk, Gartner- **Executive Perspectives** (7 reports) - CISO reports, Deloitte, Proofpoint- **Workforce and Culture** (5 reports) - ISC2, KnowBe4, CompTIA- **Market and Investment Research** (5 reports) - IT Harvest, Recorded Future- **Application Security** (9 reports) - Checkmarx, Snyk, Traceable- **Cloud Security** (7 reports) - Palo Alto, ISC2, Fortinet- **Identity Security** (19 reports) - CyberArk, Okta, SailPoint- **Penetration Testing** (5 reports) - HackerOne, Cobalt, Bugcrowd- **Privacy and Data Protection** (8 reports) - Cisco, Proofpoint, Drata- **Ransomware** (6 reports) - Sophos, Delinea, Semperis- **AI and Emerging Technologies** (12 reports) - Darktrace, Wiz, HiddenLayer## Data Files- `Data/sources.json` - All report sources with metadata- `Reports/` - Downloaded report files (PDFs, markdown)## Examples**Example 1: Update sources from upstream**```User: "Update the annual reports"→ Invokes UPDATE workflow→ Fetches latest README from GitHub→ Parses and updates sources.json→ Reports new/changed entries```**Example 2: Find threat intelligence reports**```User: "What threat reports are available?"→ Lists Global Threat Intelligence category→ Shows 56 reports from major vendors→ Provides direct URLs```**Example 3: Analyze ransomware trends**```User: "Analyze ransomware reports"→ Invokes ANALYZE workflow→ Fetches relevant reports→ Synthesizes findings across vendors→ Produces trend analysis```

Frequently asked questions

Annualreports