threat intelligence skills

53 tagged threat intelligence, measured the same way as everything else here.

Browse within: ioc 16mitre-attack 16stix 15phishing 14threat-actor 14cybersecurity 10AbuseIPDB 8MISP 8MalwareBazaar 8NIST-CSF 8VirusTotal 8agentskills 7ai-security 7appsec 7

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to monitoring Certificate Transparency logs, public records of issued website security certificates, to find suspicious or unauthorized domains and certificates. It uses crt.sh for historical searches and Certstream for live monitoring.

43 4mo ago A 53 tokens original Apache-2.0

onionclaw

03

JacobJandon/Sicry

Skill Claude CodeCodex

Search the Tor dark web, fetch .onion hidden-service pages, rotate Tor identities, and run structured multi-step OSINT investigations. Use when the user asks to search the dark web, investigate .onion sites, check whether data appeared on the dark web, fetch a .onion URL, look up leaked credentials, investigate…

19 2mo ago B 103 tokens

openclaw_skill

04

JacobJandon/Sicry

Skill Claude CodeCodex

SICRY gives you full access to the Tor network and .onion hidden services — the same way you can fetch URLs and search the regular internet, but now for the dark web.

19 2mo ago A 0 tokens

Mikaru0Mystic/sectinel

Skill Claude CodeCodex

Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence, campaign attribution, and blocking priority. Use when triaging IOCs from phishing emails, security alerts, or external threat feeds; enriching raw IOCs with…

11 1mo ago A 106 tokens copy · 84% Apache-2.0

Mikaru0Mystic/sectinel

Skill Claude CodeCodex

Monitor and analyze ransomware group data leak sites (DLS) to track victim postings, extract threat intelligence on group tactics, and assess sector-specific ransomware risk for proactive defense.

11 1mo ago A 46 tokens original Apache-2.0

virustotal-api

08

w33ts/virustotal-api-skill

Skill Claude CodeCodex

Comprehensive reference for the VirusTotal API v3, covering authentication, rate limits, endpoint usage, and the critical differences between Free (Public) and Premium (Enterprise) tiers. Use this skill whenever a user asks about VirusTotal, VT API, scanning files or URLs with VirusTotal, threat intelligence lookups…

2 5mo ago B 170 tokens original MIT