cybersecurity

cybersecurity is an Application security skill for AI agents, published by AgriciDaniel in the claude-cybersecurity repository on GitHub. Skillspace rates cybersecurity F (45/100) and the safety scan rated it risky; the rating is based on static analysis only.

Ultimate AI-powered cybersecurity code review skill. Performs comprehensive security audit across 8 dimensions: vulnerability detection (OWASP Top 10:2021, CWE Top 25:2024), secret scanning, dependency/supply chain analysis, IaC security, threat intelligence (malware/backdoor/C2 detection, MITRE ATT&CK mapping), authorization verification, AI-generated code audit, and compliance mapping. Spawns 8 parallel specialist agents with weighted scoring (0-100). Framework-aware false-positive suppression. STRIDE threat modeling. Complements GitHub Advanced Security. Use when user says "security audit", "security review", "cybersecurity", "check for vulnerabilities", "OWASP check", "secure this code", "find security issues", "pentest review", "threat model", "security scan", "check security", "vulnerability scan", "code security", "appsec review", "supply chain check", "secret scan", "hardcoded credentials".

Grade
F
Quality
45 / 100
Safety
Risky
GitHub stars
189

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since.

View source on GitHubAgriciDaniel/claude-cybersecurity

Our review

Architecture
56 / 100
Maturity
Structured: ships references or scripts
Security scan
High-risk patterns
License
MIT
Adoption
Adopted by 1 other repositories, in 1 collections

What the scanner flagged

  • prompt-injection: ignore-previous
  • exfiltration language
  • references sensitive credential env
  • accesses sensitive system files
  • dynamic code execution (eval/exec)
  • reads environment variables
  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Application security

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.