Repositorybriiirussell/cybersecurity-skillsTool
It brings structured, framework-aligned security workflows into developer sprints, lowering the barrier to consistent code auditing for small teams and solo developers.
Bri Russell's repository provides concrete guidance and execution patterns for AI coding agents to perform cybersecurity operations.
The project standardises tasks via Claude Code's SKILL.md specifications, which are translated into adapters for editors like Cursor and Codex. Instead of relying on open-ended prompting, the skills provide concrete search patterns, OWASP/NIST/ATT&CK mapping, and reporting structures. Users can install them directly using npx skills or through the Claude Code plugin marketplace.
The library targets various skill levels and operational needs:
security-start, which asks triage questions to determine the appropriate skill.owasp-audit inspect source code, api-audit covers API endpoints, and dependency-audit focuses on known CVEs.patch-sweep skill is designed to locate vulnerable libraries across multiple applications and roll out patches.With nearly 500 GitHub stars, 61 forks, active CI, and an MIT licence, the project displays steady community traction. By turning pentesting insights into structured agent skills, it helps engineers maintain baseline security without requiring full-time security staff.
Summary generated by AI (Gemini 3.8 Flash, 29 October 2026). It may contain errors – the original source is authoritative.
Similar in content, found by the AI search.
X post:Corey Haines
Bri Russell has released a major update to her open-source cybersecurity-skills repository. The collection provides security playbooks and automated workflows for AI coding agents like Claude Code, Cursor, and Codex, helping teams without dedicated security personnel run formal audits.
170bookmarks7.6kviews
Repository:cloudflare/security-audit-skill
Cloudflare's security-audit-skill is an open-source coding-agent workflow that orchestrates multi-phase security audits with independently verified, machine-readable findings.
5.2kstarsJavaScript
Link:SkillPatch
SkillPatch is a public registry for AI agent skills based on the open SKILL.md standard. The platform provides automated security assessments prior to publication and supports tools such as Claude Code, Cursor, and GitHub Copilot.
Repository:addyosmani/agent-skills
The open-source repository addyosmani/agent-skills provides structured engineering skills and slash commands for AI coding agents, covering the entire software lifecycle from specification to deployment.
100.2kstarsJavaScript
Repository:NVIDIA/SkillSpector
SkillSpector is an open-source security scanner from NVIDIA designed to inspect extensions and skills for AI agents (such as Claude Code, Codex CLI, and MCP) for vulnerabilities and malicious patterns before installation.
15.9kstarsPython
Repository:aws/agent-toolkit-for-aws
The Agent Toolkit for AWS offers official MCP servers, skills, and plugins allowing AI coding agents like Claude Code, Codex, Cursor, and Kiro to build, deploy, and operate AWS applications.
2.5kstarsPython
Parts of this content were created with the assistance of AI.