cti skills

110 tagged cti, measured the same way as everything else here.

Browse within: cybersecurity 85cyber-threat-intelligence 79cyber-security 78cyber-threat-tool 78cyber-threats 78ioc 39stix 35threat-intelligence 34mitre-attack 29MISP 18campaign-analysis 13attribution 11NIST-CSF 10TAXII 10

zettelforge

01

ThreatRecall/zettelforge

Skill Claude CodeCodex

ZettelForge v2.0.0 — Production CTI agentic memory system. Hybrid TypeDB (STIX 2.1 ontology) + LanceDB (vector search). Zero external AI dependencies: fastembed for embeddings, llama-cpp-python for LLM. 75% accuracy on CTI queries, 18% on LOCOMO. Use when agents need persistent memory, threat intel retrieval, entity…

not rated 66 +1 2d ago A SkillSpector: pass 97 tokens original MIT

indicator-pivoting

02

Liberty91LTD/cti-skills

Skill Claude Code needs its repo

Indicator pivoting methodology — how to use one known indicator to discover related infrastructure across the IOC graph. Decision tree by indicator type with concrete /lookup- commands per pivot, a worked multi-hop example, pivot-quality scoring, and routing into the rigor pipeline. Use when the user asks "what else…

not rated 27 18d ago A 103 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: