Customization
Before executing, check for user customizations at:
~/.opencode/PAI/USER/SKILLCUSTOMIZATIONS/AnnualReports/
If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.
AnnualReports - Security Report Aggregation
Aggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.
Source: awesome-annual-security-reports
Workflow Routing
- UPDATE - Fetch latest report sources from GitHub →
Workflows/Update.md
- ANALYZE - Analyze reports for trends and insights →
Workflows/Analyze.md
- FETCH - Download specific reports →
Workflows/Fetch.md
Quick Reference
# Update sources from GitHub
bun run ~/.opencode/skills/AnnualReports/Tools/UpdateSources.ts
# List all sources
bun run ~/.opencode/skills/AnnualReports/Tools/ListSources.ts [category]
# Fetch a specific report
bun run ~/.opencode/skills/AnnualReports/Tools/FetchReport.ts <vendor> <report-name>
Categories
Analysis Reports
- Global Threat Intelligence (56 reports) - CrowdStrike, Microsoft, IBM, Mandiant, etc.
- Regional Assessments (11 reports) - FBI, CISA, Europol, NCSC, etc.
- Sector Specific Intelligence (13 reports) - Healthcare, Finance, Energy, Transport
- Application Security (21 reports) - OWASP, Veracode, Snyk, GitGuardian
- Cloud Security (11 reports) - Google Cloud, AWS, Wiz, Datadog
- Vulnerabilities (14 reports) - Rapid7, VulnCheck, Edgescan
- Ransomware (9 reports) - Veeam, Zscaler, Palo Alto
- Data Breaches (6 reports) - Verizon DBIR, IBM Cost of Breach
- Physical Security (6 reports) - Dragos, Nozomi, Waterfall
- AI and Emerging Technologies (11 reports) - Anthropic, Google, Zimperium
Survey Reports
- Industry Trends (68 reports) - WEF, ISACA, Splunk, Gartner
- Executive Perspectives (7 reports) - CISO reports, Deloitte, Proofpoint
- Workforce and Culture (5 reports) - ISC2, KnowBe4, CompTIA
- Market and Investment Research (5 reports) - IT Harvest, Recorded Future
- Application Security (9 reports) - Checkmarx, Snyk, Traceable
- Cloud Security (7 reports) - Palo Alto, ISC2, Fortinet
- Identity Security (19 reports) - CyberArk, Okta, SailPoint
- Penetration Testing (5 reports) - HackerOne, Cobalt, Bugcrowd
- Privacy and Data Protection (8 reports) - Cisco, Proofpoint, Drata
- Ransomware (6 reports) - Sophos, Delinea, Semperis
- AI and Emerging Technologies (12 reports) - Darktrace, Wiz, HiddenLayer
Data Files
Data/sources.json - All report sources with metadataReports/ - Downloaded report files (PDFs, markdown)
Examples
Example 1: Update sources from upstream
User: "Update the annual reports"
→ Invokes UPDATE workflow
→ Fetches latest README from GitHub
→ Parses and updates sources.json
→ Reports new/changed entries
Example 2: Find threat intelligence reports
User: "What threat reports are available?"
→ Lists Global Threat Intelligence category
→ Shows 56 reports from major vendors
→ Provides direct URLs
Example 3: Analyze ransomware trends
User: "Analyze ransomware reports"
→ Invokes ANALYZE workflow
→ Fetches relevant reports
→ Synthesizes findings across vendors
→ Produces trend analysis
1---2name: annualreports3description: Security report aggregation. USE WHEN annual reports, security reports, threat reports.4---56## Customization78**Before executing, check for user customizations at:**9`~/.opencode/PAI/USER/SKILLCUSTOMIZATIONS/AnnualReports/`1011If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.1213# AnnualReports - Security Report Aggregation1415Aggregates and analyzes annual security reports from 570+ sources across the cybersecurity industry.1617**Source:** [awesome-annual-security-reports](https://github.com/jacobdjwilson/awesome-annual-security-reports)1819## Workflow Routing2021- **UPDATE** - Fetch latest report sources from GitHub → `Workflows/Update.md`22- **ANALYZE** - Analyze reports for trends and insights → `Workflows/Analyze.md`23- **FETCH** - Download specific reports → `Workflows/Fetch.md`2425## Quick Reference2627```bash28# Update sources from GitHub29bun run ~/.opencode/skills/AnnualReports/Tools/UpdateSources.ts3031# List all sources32bun run ~/.opencode/skills/AnnualReports/Tools/ListSources.ts [category]3334# Fetch a specific report35bun run ~/.opencode/skills/AnnualReports/Tools/FetchReport.ts <vendor> <report-name>36```3738## Categories3940### Analysis Reports41- **Global Threat Intelligence** (56 reports) - CrowdStrike, Microsoft, IBM, Mandiant, etc.42- **Regional Assessments** (11 reports) - FBI, CISA, Europol, NCSC, etc.43- **Sector Specific Intelligence** (13 reports) - Healthcare, Finance, Energy, Transport44- **Application Security** (21 reports) - OWASP, Veracode, Snyk, GitGuardian45- **Cloud Security** (11 reports) - Google Cloud, AWS, Wiz, Datadog46- **Vulnerabilities** (14 reports) - Rapid7, VulnCheck, Edgescan47- **Ransomware** (9 reports) - Veeam, Zscaler, Palo Alto48- **Data Breaches** (6 reports) - Verizon DBIR, IBM Cost of Breach49- **Physical Security** (6 reports) - Dragos, Nozomi, Waterfall50- **AI and Emerging Technologies** (11 reports) - Anthropic, Google, Zimperium5152### Survey Reports53- **Industry Trends** (68 reports) - WEF, ISACA, Splunk, Gartner54- **Executive Perspectives** (7 reports) - CISO reports, Deloitte, Proofpoint55- **Workforce and Culture** (5 reports) - ISC2, KnowBe4, CompTIA56- **Market and Investment Research** (5 reports) - IT Harvest, Recorded Future57- **Application Security** (9 reports) - Checkmarx, Snyk, Traceable58- **Cloud Security** (7 reports) - Palo Alto, ISC2, Fortinet59- **Identity Security** (19 reports) - CyberArk, Okta, SailPoint60- **Penetration Testing** (5 reports) - HackerOne, Cobalt, Bugcrowd61- **Privacy and Data Protection** (8 reports) - Cisco, Proofpoint, Drata62- **Ransomware** (6 reports) - Sophos, Delinea, Semperis63- **AI and Emerging Technologies** (12 reports) - Darktrace, Wiz, HiddenLayer6465## Data Files6667- `Data/sources.json` - All report sources with metadata68- `Reports/` - Downloaded report files (PDFs, markdown)6970## Examples7172**Example 1: Update sources from upstream**73```74User: "Update the annual reports"75→ Invokes UPDATE workflow76→ Fetches latest README from GitHub77→ Parses and updates sources.json78→ Reports new/changed entries79```8081**Example 2: Find threat intelligence reports**82```83User: "What threat reports are available?"84→ Lists Global Threat Intelligence category85→ Shows 56 reports from major vendors86→ Provides direct URLs87```8889**Example 3: Analyze ransomware trends**90```91User: "Analyze ransomware reports"92→ Invokes ANALYZE workflow93→ Fetches relevant reports94→ Synthesizes findings across vendors95→ Produces trend analysis96```
steffen025