A collection of Claude Code skills that help security teams stay secure
概览
A plugin marketplace of Claude Code skills that automate security operations. Install individual skills to automate specific platforms, or combine several for end-to-end integration across your security stack. - Claude Code (or Skills compatible) CLI installed Replacing SKILL-NAME with the desired skill name you want to install. 2. Some skills may require configuration. For example, the CrowdStrike Fusion workflow requires an API key to understand your live environment and optimise your workflows. 3. Start Claude Code in the project directory: Claude will automatically use the appropriate skill based on your request. Each skill lives under plugins/ /skills/ / and includes:
README
Security Skills for Claude Code
A plugin marketplace of Claude Code skills that automate security operations.
Install individual skills to automate specific platforms, or combine several for end-to-end integration across your security stack.
Available Skills
| Skill | Platform | What It Does |
|---|---|---|
| fusion-workflows | CrowdStrike Falcon Fusion SOAR | Create, validate, import, execute, and export Fusion SOAR workflows. Discovers actions via the live API, authors YAML with correct schema and data references, handles CEL expressions, loop/conditional patterns, and manages the full workflow lifecycle. |
| lookup-files | CrowdStrike Falcon Next-Gen SIEM | List, create, update, download, and delete lookup files for use with CQL match() queries. Supports CSV, JSON, and TXT formats with search domain management and FQL-based search. |
Getting Started
Prerequisites
- Claude Code (or Skills compatible) CLI installed
Install via Plugin Marketplace
/plugin marketplace add https://github.com/eth0izzle/security-skills.git
/plugin install SKILL-NAME@security-skills
Replacing SKILL-NAME with the desired skill name you want to install.
Manual Setup
If you prefer to install manually:
- Clone the repository:
git clone https://github.com/eth0izzle/security-skills.git
cd security-skills
cp -r plugins/ ~/.claude/plugins/
-
Some skills may require configuration. For example, the CrowdStrike Fusion workflow requires an API key to understand your live environment and optimise your workflows.
-
Start Claude Code in the project directory:
claude
- Ask Claude to build something:
/plan
> Create a workflow that contains a device and sends a Slack notification
> Create multiple workflows based on the attached BEC Playbook
> What CrowdStrike actions are available to help with forensics capture?
Claude will automatically use the appropriate skill based on your request.
Using a Skill Directly
Each skill lives under plugins//skills// and includes:
SKILL.md— the skill definition that Claude loads automaticallyscripts/— CLI tools for interacting with the platform APIreferences/— schema docs, expression syntax, best practicesassets/— templates and starter files
Contributing
To add a new security skill:
- Create a plugin directory under
plugins// - Add a
.claude-plugin/plugin.jsonmanifest - Create the skill under
plugins//skills// - Write a
SKILL.mdthat describes the skill’s capabilities, prerequisites, and step-by-step workflow - Add scripts for API interaction, validation, and deployment
- Add reference docs for schema, syntax, and best practices
- Add template assets for common patterns
- Register the plugin in
.claude-plugin/marketplace.json - Submit a pull request
See the fusion-workflows skill as a reference implementation.
License
MIT
推荐工具
换一个关键词,或者移除筛选条件。
安装
npx skillfish add eth0izzle/security-skills