Waskill

Claude skills for security

Top 40 open-source Claude security skills from popular GitHub repos, out of 846 indexed. Find the right SKILL.md for your prompt. Not sure which one fits? Paste your prompt into Waskill and get the top 5 matches.

  1. competitor-profiling — Use it when you want a clear profile of your competitors based on their websites.coreyhaines31/marketingskills · 54,913 stars
  2. cantera — Use it when you want to combustion kinetics, closed adiabatic ideal-gas constant-volume or constant-pressure ignition, temperature histories.K-Dense-AI/scientific-agent-skills · 50,561 stars
  3. consciousness-council — Use it when you want to requests a council, panel, devil's advocate analysis, "mind council".K-Dense-AI/scientific-agent-skills · 50,561 stars
  4. research-grants — Use it when you want to investigator-authored grant development, compliance matrices, and proposal critiques.K-Dense-AI/scientific-agent-skills · 50,561 stars
  5. abusing-dpapi-for-credential-access — Use it when you want to extract and decrypt Windows DPAPI-protected secrets online or offline using SharpDPAPI, SharpChrome, Mimikatz.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  6. abusing-shadow-credentials-for-privesc — Use it for \1loodHound shows GenericWrite/GenericAll/AddKeyCredentialLink over a target, as a stealthier alternative to ForceChangePassword.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  7. achieving-cmmc-level-2-compliance — Use it when an organization handles Controlled Unclassified Information under a DoD contract.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  8. acquiring-disk-image-with-dd-and-dcfldd — Use it when you're imaging a suspect drive, USB device, or memory card for investigation, preserving volatile disk evidence during incident response.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  9. analyzing-active-directory-acl-abuse — Use it when you want to detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  10. analyzing-android-malware-with-apktool — Use it for perform static analysis of Android APK malware using apktool for resource decompilation, jadx for Java source recovery.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  11. analyzing-api-gateway-access-logs — Use it when you're investigating API abuse or building API-specific threat detection rules.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  12. analyzing-apt-group-with-mitre-navigator — Use it for query ATT&CK data with attackcti, mitreattack-python, and stix2.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  13. analyzing-azure-activity-logs-for-threats — Use it when you're investigating suspicious Azure tenant activity or building cloud SIEM detections.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  14. analyzing-bootkit-and-rootkit-samples — Use it when you want to compromise survives OS reinstallation or antivirus/EDR fails to detect malware despite clear infection signs.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  15. analyzing-browser-forensics-with-hindsight — Use it when you want to parse Chromium-based browser databases with Hindsight to extract and correlate browsing history, downloads, cookies.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  16. analyzing-campaign-attribution-evidence — Use it when an incident investigation needs a defensible attribution confidence level.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  17. analyzing-certificate-transparency-for-phishing — Use it for monitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  18. analyzing-cloud-storage-access-patterns — Use it when you're investigating suspected cloud data exfiltration or building related detection rules.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  19. analyzing-cobalt-strike-beacon-configuration — Use it when you want to extract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  20. analyzing-cobaltstrike-malleable-c2-profiles — Use it when you're reverse-engineering a captured malleable profile or building detections against Cobalt Strike Beacon traffic.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  21. analyzing-command-and-control-communication — Use it when you want to analyze malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  22. analyzing-cyber-kill-chain — Use it when you're conducting post-incident analysis, building prevention-focused security controls, or mapping detection gaps to kill chain phases.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  23. analyzing-disk-image-with-autopsy — Use it for perform comprehensive forensic analysis of raw , E01, or AFF disk images with Autopsy and The Sleuth Kit, recovering deleted files.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  24. analyzing-dns-logs-for-exfiltration — Use it for \1OC teams need to identify DNS-based threats that bypass traditional network security controls.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  25. analyzing-docker-container-forensics — Use it when you want to investigate compromised Docker containers by analyzing images, layers, volumes, logs.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  26. analyzing-email-headers-for-phishing-investigation — Use it when you want to check a suspicious email's headers to see where it really came from.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  27. analyzing-ethereum-smart-contract-vulnerabilities — Use it for perform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy, integer overflow.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  28. analyzing-golang-malware-with-ghidra — Use it when you're analyzing a Go-language malware sample, deobfuscating a garble-packed Go binary.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  29. analyzing-heap-spray-exploitation — Use it when you want to detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  30. analyzing-indicators-of-compromise — Use it when you're triaging IOCs from phishing emails, security alerts, or external threat feeds.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  31. analyzing-ios-app-security-with-objection — Use it when you want to runtime iOS app security testing with Objection : inspect keychain and filesystem data, explore app internals at runtime.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  32. analyzing-kubernetes-audit-logs — Use it when you're investigating a suspected cluster compromise, reconstructing what an attacker did through the API server.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  33. analyzing-linux-audit-logs-for-intrusion — Use it when you want to use the Linux Audit framework with ausearch and aureport utilities to detect intrusion attempts, unauthorized access.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  34. analyzing-linux-elf-malware — Use it when you're investigating Linux malware, triaging a suspicious ELF binary, assessing a compromised Linux server.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  35. analyzing-linux-kernel-rootkits — Use it when you want to detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins , rkhunter system scanning.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  36. analyzing-linux-system-artifacts — Use it when you're investigating a compromised Linux server or workstation, hunting for persistence mechanisms.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  37. analyzing-lnk-file-and-jump-list-artifacts — Use it when you're investigating Windows user activity, reconstructing file-access or program-execution timelines.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  38. analyzing-macro-malware-in-office-documents — Use it when you want to analyze malicious VBA macros embedded in Microsoft Office documents to identify download cradles, payload execution.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  39. analyzing-malicious-pdf-with-peepdf — Use it when you're triaging a suspicious PDF attachment from a phishing email, analyzing a PDF-based exploit document.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars
  40. analyzing-malicious-url-with-urlscan — Use it for URLScan.io is a free service for scanning and analyzing suspicious URLs.mukul975/Anthropic-Cybersecurity-Skills · 34,516 stars

Get new and trending Claude skills, one short email a week.

Skills indexed from public GitHub repos (100+ stars). Not affiliated with Anthropic. ← Back to Waskill