cybersecurity-skills
Security audits, incident response, and compliance reviews
All Skills in This Repository (29)
Pure Emerald Level Indicatorsdisk-forensics
Recover deleted files and reconstruct unified timelines from disk images.
web-pentest
Conduct authorized black-box or grey-box penetration tests of live web applications.
api-audit
Audit REST, GraphQL, and RPC endpoints against OWASP API Security Top 10.
pci-audit
Audit payment card environments against PCI DSS v4.0 requirements.
siem-detection
Assess log source coverage, author Sigma rules, and translate to SIEM query languages.
privacy-engineering
Implement and audit privacy controls for GDPR and CCPA requirements.
red-team-engagement
Plan and coordinate authorized red-team engagements with ATT&CK emulation and reporting.
incident-triage
Classify security incidents and produce initial triage plans with NIST SP 800-61r2 methodology.
security-comms
Translate technical cybersecurity findings into stakeholder-ready communication for non-security audiences.
csf-mapping
Map cybersecurity programs to NIST CSF 2.0 and produce tiered gap analyses.
cloud-audit
Audit AWS, GCP, and Azure infrastructure for security misconfigurations and logging gaps.
secrets-audit
Detect leaked credentials in repositories, Git history, and build artifacts.
Frequently Asked Questions
FAQPage SchemaHow to install cybersecurity-skills?▼
Run `npx skills add briiirussell/cybersecurity-skills --all -g -y` in your terminal to install all skills globally.
What security tasks can these skills handle?▼
They cover code and API audits against OWASP, cloud and container misconfiguration reviews, dependency CVE checks, incident triage, disk forensics, threat hunting, and compliance reviews for HIPAA, PCI DSS, and GDPR.
Do I need security experience to use these skills?▼
No. Each skill guides the agent end-to-end and explains findings in plain English, so developers and founders without a security team can run real audits.
Do the offensive skills work on any target?▼
No. Skills like web-pentest, recon, and red-team-engagement start with an authorization check and refuse to act against systems you cannot prove you are allowed to test.
Which agents support these cybersecurity skills?▼
They are authored as standard SKILL.md files and ship with adapters for Cursor and Codex, so they work in Claude Code, Cursor, Codex, and other compatible agents.
Related Repositories in Software Engineering
View All in Software Engineering→openclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core