claude-cybersecurity

<p align="center"> <img src="assets/banner.svg" alt="claude-cybersecurity: AI-Powered Code Security Audit" width="100%"> </p> <p align="center"> <a href="https://github.com/AgriciDaniel/claude-cybersecurity/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-MIT-green.svg" alt="MIT License"></a> <img src="https://img.shields.io/badge/claude--code-skill-blueviolet" alt="Claude Code Skill"> <img src="https://img.shields.io/badge/agents-8-00ff88" alt="8 Specialist Agents"> <img src="https://img.shields.io/badge/CWE%20Top%2025-100%25-red" alt="CWE Top 25 Coverage"> <img src="https://img.shields.io/badge/OWASP-2021-orange" alt="OWASP 2021"> <img src="https://img.shields.io/badge/languages-14-blue" alt="14 Languages"> </p>

---

The most comprehensive AI-powered cybersecurity code review skill for Claude Code. Spawns 8 parallel specialist agents to audit your codebase across vulnerability detection, authorization verification, secret scanning, supply chain analysis, IaC security, threat intelligence (malware/C2/backdoor detection), AI-generated code patterns, and business logic flaws.

Complements GitHub Advanced Security by detecting what static tools architecturally cannot: missing security controls, business logic flaws, attack-path chaining, and obfuscated secrets — with zero configuration.

---

Installation

Manual (recommended)

git clone https://github.com/AgriciDaniel/claude-cybersecurity.git
cd claude-cybersecurity
bash install.sh

Plugin (Claude Code native)

claude plugin install cybersecurity

One-liner (convenience)

curl -fsSL https://raw.githubusercontent.com/AgriciDaniel/claude-cybersecurity/main/install.sh | bash

Demo

https://youtu.be/aE295lLPO5A

---

Quick Start

# Full security audit of current project
/cybersecurity

# Quick scan (entry points + auth + secrets + deps only)
/cybersecurity --scope quick

# Review only changed files (PR review mode)
/cybersecurity --scope diff

# Deep dive into one dimension
/cybersecurity --focus threat

# With compliance mapping
/cybersecurity --compliance pci

What It Does

<p align="center"> <img src="assets/agents-chart.svg" alt="8 Specialist Agents" width="100%"> </p>

Key Differentiators vs GitHub Advanced Security

| Capability | GHAS | This Skill | |------------|------|-----------| | Business logic flaw detection | No | Yes | | Authorization enforcement verification | Basic | Context-aware | | Race condition detection | Very limited | Concurrency pattern analysis | | Languages supported | 12 | 14 (pattern-based) + broader reasoning via LLM | | IaC/Container/CI-CD scanning | No | Terraform, Docker, K8s, Actions | | AI-generated code security | No | Specialized detection | | Obfuscated secret detection | Regex only | Semantic context analysis | | Threat intelligence (malware/C2) | No | MITRE ATT&CK mapped | | Framework-aware false-positive suppression | No | 10 frameworks | | Cost | $49/committer/month | Free (with Claude Code) |

Coverage

<p align="center"> <img src="assets/coverage.svg" alt="Coverage at a Glance" width="100%"> </p>

Scoring System

<p align="center"> <img src="assets/scoring.svg" alt="Scoring System" width="100%"> </p>

Architecture

<p align="center"> <img src="assets/architecture.svg" alt="GARE Architecture" width="100%"> </p>

File Structure

skills/cybersecurity/
├── SKILL.md                              (~990 lines — orchestrator)
├── references/
│   ├── vulnerability-taxonomy.md         (25 CWE categories)
│   ├── scoring-rubric.md                 (formula + confidence system)
│   ├── threat-intelligence.md            (MITRE ATT&CK patterns)
│   ├── compliance-matrix.md              (5 frameworks)
│   ├── false-positive-suppression.md     (10 frameworks)
│   ├── semgrep-patterns.md              (8 detection patterns)
│   ├── report-template.md               (output format + worked example)
│   ├── language-patterns/               (11 files)
│   └── iac-patterns/                    (4 files)

Total: 23 files, 5,350 lines of security knowledge.

Requirements

• Claude Code (CLI, Desktop, or IDE extension)
• No other dependencies — zero configuration, works immediately

Uninstall

curl -fsSL https://raw.githubusercontent.com/AgriciDaniel/claude-cybersecurity/main/uninstall.sh | bash

Or manually:

rm -rf ~/.claude/skills/cybersecurity

Related Projects

• claude-seo — Comprehensive SEO analysis
• claude-blog — Full-lifecycle blog engine
• claude-ads — Paid advertising audit

License

MIT - AgriciDaniel 2026