incident-response plugins

mukul975/Anthropic-Cybersecurity-Skills

Plugin Claude Code

Bundles 56 skills · 4,581 tokens together

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more.

gl0bal01/malware-analysis-claude-skills

Plugin Claude Code

Bundles 6 skills · 453 tokens together

Agentic malware analysis: Claude runs the static tooling, parses exported VM evidence, writes and tests detection rules, and drafts the report across triage, dynamic analysis, specialized file analysis, detection engineering, and reporting.

DeepBitsTechnology/claude-plugins

Plugin Claude Code

Bundles 2 skills, 7 commands, 1 agent, 1 MCP server · 445 tokens together

Local cyber security assistant for PC issue detection, malware analysis, and system scanning.

kevinmhorvath/threat-intel-toolkit

Plugin Claude Code

Bundles 2 skills, 1 agent · 609 tokens together

Defensive IOC + vulnerability triage on free/open-source intel: a subagent plus two skills — threat-intel-lookup (aggregates 10 key-free feeds and looks up IPs, domains, URLs, CVEs) and exploit-availability-check (rates a CVE's exploit/PoC maturity via KEV, EPSS, Metasploit, Nuclei, Exploit-DB, and PoC aggregators).…

antimetal/cursor-plugin

Plugin Claude Code

Bundles 3 skills · 217 tokens together

Bring Antimetal's software investigation intelligence into Claude Code. Triage problems, investigate root causes, fetch observability artifacts, and apply remediations—all from your terminal.

bouob/sysadmin-skills

Plugin Claude Code

Bundles 9 skills · 1,173 tokens together

ITIL 4-based IT operations skills for system administrators — incident response, change management with CAB review, and status communication.

joshuafuller/claude-spill-scrub

Plugin Claude Code

Bundles 1 skill · 102 tokens together

Find and scrub credentials that leaked into Claude Code's own local logs. Scan is read-only, scrub is gated, and every run ends on a rotation checklist.

landfalls-ai/landfall-cli

Plugin Claude Code

Bundles 1 agent · 151 tokens together

Join a Landfall war room as a live investigator and expose its incident MCP tools (joinwarroom, getbrief, getupdates, readtimeline, searchcontext, postfinding, postwidget, proposeaction, recordactivity, note) over stdio. Ships the landfall-investigation-dashboard agent, which recognizes a war-room join prompt.