为AI编码代理提供最全面的网络安全技能包——741项技能，涵盖攻防、云、取证、恶意软件分析、夺旗、应用安全、开发安全运维、OT/ICS等。
概览
针对AI编码代理——目前最全面的单一仓库集合。涵盖进攻、防御、云、取证、夺旗、应用安全、DevSecOps等。 遵循 agentskills.io 开放标准。支持Claude、Claude Code、GitHub Copilot、OpenAI Codex、Cursor、Gemini CLI及其他20+平台。 从10个高质量仓库合并并去重： 详见SOURCES.json以获取完整的技能等级来源地图。 - （同名：字段）：移除，保留最佳版本 - （不同角度/深度）：两者均保留 - 详情见DEDUP_REPORT.json 每个技能遵循 agentskills.io 标准： 单个技能保留其原始许可。详情请参见每个技能的目录。集合结构：Apache 2.0。
概述（AI 翻译）
741 人工智能编码代理的网络安全技能——目前最全面的单一仓库集合。涵盖进攻、防御、云、取证、夺旗、应用安全、DevSecOps 等。
遵循 agentskills.io 开放标准。支持Claude、Claude Code、GitHub Copilot、OpenAI Codex、Cursor、Gemini CLI及其他20+平台。
安装
报道
| 类别 | 技能 |
|---|---|
| 云安全 | AWS、Azure、GCP 审计、CSPM、IAM |
| 威胁情报 | APT分析、MITRE ATT&CK、STIX/TAXII、OSINT、暗网 |
| Web应用安全 | XSS、SQLi、SSRF、HTTP走私、缓存中毒 |
| 进攻/渗透测试 | 变形、打嗝套装、侦察、利用、指挥 |
| 红队 | 血猎犬，克尔博罗斯攻击，AD攻击，闪避 |
| 数字取证 | 波动性、磁盘成像、存储、移动、网络 |
| 恶意软件分析 | Ghidra、YARA、Cuckoo、静态/动态分析 |
| SOC 操作 | SIEM、Splunk、Windows 事件日志、检测规则 |
| 网络安全 | Wireshark、Suricata、VLAN、IDS/IPS |
| 身份与访问 | SAML、OAuth2、FIDO2、PAM、CyberArk、SailPoint |
| 应用安全（SAST/DAST/SCA） | Semgrep，CodeQL，依赖扫描，秘密 |
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
Master Cybersecurity Skills
741 cybersecurity skills for AI coding agents — the most comprehensive single-repo collection available. Covers offense, defense, cloud, forensics, CTF, AppSec, DevSecOps, and more.
Follows the agentskills.io open standard. Works with Claude, Claude Code, GitHub Copilot, OpenAI Codex, Cursor, Gemini CLI, and 20+ other platforms.
Install
# Claude Code
/plugin marketplace add Njones17/AI-agent-master-cyber-skills-list
# Or clone directly
git clone https://github.com/Njones17/AI-agent-master-cyber-skills-list .skills/cybersecurity
Coverage
| Category | Skills |
|---|---|
| Cloud Security | AWS, Azure, GCP auditing, CSPM, IAM |
| Threat Intelligence | APT analysis, MITRE ATT&CK, STIX/TAXII, OSINT, dark web |
| Web Application Security | XSS, SQLi, SSRF, HTTP smuggling, cache poisoning |
| Offensive / Pentest | Metasploit, Burp Suite, recon, exploitation, C2 |
| Red Teaming | BloodHound, Kerberoasting, AD attacks, evasion |
| Digital Forensics | Volatility, disk imaging, memory, mobile, network |
| Malware Analysis | Ghidra, YARA, Cuckoo, static/dynamic analysis |
| SOC Operations | SIEM, Splunk, Windows Event Logs, detection rules |
| Network Security | Wireshark, Suricata, VLAN, IDS/IPS |
| Identity & Access | SAML, OAuth2, FIDO2, PAM, CyberArk, SailPoint |
| AppSec (SAST/DAST/SCA) | Semgrep, CodeQL, dependency scanning, secrets |
| Container Security | Trivy, Falco, Kubernetes hardening, Harbor |
| DevSecOps | GitLab CI, Gitleaks, supply chain, sbom |
| OT/ICS Security | SCADA, Modbus, Purdue Model |
| Cryptography | TLS, HSM, constant-time analysis, zeroize audit |
| CTF | Web, pwn, crypto, reverse engineering, forensics, OSINT |
| Incident Response | Ransomware, cloud IR, volatile evidence |
| Compliance | GDPR, ISO 27001, PCI DSS, CIS Benchmarks |
| AI/LLM Security | Prompt injection, model supply chain, red teaming |
| Smart Contracts | Solidity audit, timing side-channels, blockchain |
Sources
Merged and deduplicated from 10 high-quality repos:
| Repo | Stars | Contribution |
|---|---|---|
| trailofbits/skills | 3.3k | Security research, audit, static analysis, YARA, smart contracts |
| trailofbits/skills-curated | — | ffuf, Ghidra, Wooyun legacy, OpenAI security skills |
| ghostsecurity/skills | 356 | AppSec SAST/DAST/SCA/secrets scanning |
| itsmostafa/aws-agent-skills | 1k | AWS IAM, Secrets Manager, Cognito |
| mukul975/Anthropic-Cybersecurity-Skills | 9 | 611+ broad cybersecurity skills |
| narlyseorg/superhackers | — | Offensive pentest workflow (webapp/API/infra/Android) |
推荐工具
换一个关键词，或者移除筛选条件。
安装
npx skillfish add njones17/ai-agent-master-cyber-skills-list