The most comprehensive cybersecurity skill pack for AI coding agents — 741 skills spanning offense, defense, cloud, forensics, malware analysis, CTF, AppSec, DevSecOps, OT/ICS, and more. Drop-in compatible with Claude, Codex, Gemini CLI, Cursor, and 20+ platforms.
This repository also configures its own agents. See what AI-agent-master-cyber-skills-list tells them →
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
A Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digital certificates. This skill covers building a two-tier CA hierarchy (Root CA +.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Hardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and perform cryptographic operations in a hardened environment. Keys stored in an HSM never lea.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
AES (Advanced Encryption Standard) is a symmetric block cipher standardized by NIST (FIPS 197) used to protect classified and sensitive data. This skill covers implementing AES-256 encryption in GCM m.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific signing tools, establishing trust chains, and verifying signatures in deployment…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Ed25519 is a high-performance digital signature algorithm using the Edwards curve Curve25519. It provides 128-bit security with 64-byte signatures and 32-byte keys, offering significant advantages ove.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implements full disk encryption using Microsoft BitLocker on Windows endpoints to protect data at rest from unauthorized access in case of device loss or theft. Use when deploying encryption for compliance requirements, securing mobile workstations, or implementing data protection controls across the enterprise.…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
End-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary (including the server) able to decrypt them. This skill implements a simplified version.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Envelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a master key (KEK) managed by AWS KMS. This approach allows encrypting.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Sign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications. This skill covers implementing secure JWT signing with HMAC-SHA256.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Wycheproof provides test vectors for validating cryptographic implementations. Use when testing crypto code for known attacks and edge cases.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude Code
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Scan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check. Identify and remediate vulnerable libraries in your software supply chain. Use when managing third-party dependencies or implementing software composition analysis.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection. Covers Windows event logs, firewall logs, proxy logs, and authentication data analysis. Activates for requests involving Splunk…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Analyzes Windows Security, System, and Sysmon event logs in Splunk to detect authentication attacks, privilege escalation, persistence mechanisms, and lateral movement using SPL queries mapped to MITRE ATT&CK techniques. Use when SOC analysts need to investigate Windows-based threats, build detection queries, or…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations. It details configuring data connectors for multi-cloud log ingestion, writing KQL detection queries, building automated response playbooks with Logic Apps, and leveraging the Sentinel data lake…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Builds vendor-agnostic detection rules using the Sigma rule format for threat detection across SIEM platforms including Splunk, Elastic, and Microsoft Sentinel. Use when creating portable detection logic from threat intelligence, mapping rules to MITRE ATT&CK techniques, or converting community Sigma rules into…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, and configuration changes for security violations. Use when deploying OSSEC, Wazuh, or AIDE for endpoint monitoring, building file integrity monitoring (FIM) policies, or meeting compliance requirements for…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Installs, configures, and tunes Snort 3 intrusion detection system to monitor network traffic for malicious activity using custom and community rulesets, preprocessors, and alert output plugins on authorized network segments.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Deploys and configures Suricata IDS/IPS with Emerging Threats rulesets, EVE JSON logging, and custom rules for real-time network traffic inspection, threat detection, and integration with SIEM platforms for centralized security monitoring.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: