“Security engineers and red-teamers looking for large, framework-mapped skill packs covering offense, defense, and compliance.”
Structured skill packs mapping MITRE ATT&CK, NIST, and CVE data into agent-usable procedures for pentesting, forensics, and threat modeling.
Updated 2026-08-20 · tested against Hermes v0.20.4
800+ skills across 29 security domains mapped to MITRE ATT&CK, ATLAS, D3FEND, and NIST — the largest and most-starred security pack in the catalog. Start here before any narrower pentest skill.
npx skills add mukul975/Anthropic-Cybersecurity-Skills
works withagentskills.io-compatible clients (Claude Code, Copilot, Codex); installable on Hermes via hermes skills tap add or npx skills add.
2,000+ skills stitched from 7 external repos plus 130+ installable tools (Sigma, YARA, MISP). A deeper turnkey lab than the Anthropic-Cybersecurity-Skills pack, but a heavier multi-repo clone — pick it for a dedicated security profile, not a quick add.
git clone https://github.com/handnewb/hermes-cybersec-lab.git, run scripts/clone-all.sh, then copy into ~/.hermes/profiles/<profile>/skills/cybersecurity-lab/.
works withHermes Agent native — the README targets ~/.hermes/profiles/<profile>/skills/ explicitly.
These are curated by hand, not scraped or ranked by an algorithm. Every entry is a project already accepted into the Atlas catalog; the install command is copied out of that project's own README (not inferred), the compatibility line reflects what the README actually claims to support, and the verdict says what this pick does that its neighbours don't. Star counts come live from the GitHub API on each build. Updated 2026-08-20 · tested against Hermes v0.20.4.
mukul975/Anthropic-Cybersecurity-Skills. 800+ skills across 29 security domains mapped to MITRE ATT&CK, ATLAS, D3FEND, and NIST — the largest and most-starred security pack in the catalog. Start here before any narrower pentest skill. Install it with: npx skills add mukul975/Anthropic-Cybersecurity-Skills
From the Hermes CLI. Running hermes skills install owner/repo/skills/name installs a single skill; hermes skills tap add owner/repo registers a whole repository as a tap, so every skill inside it becomes available. Plugins use hermes plugins install owner/repo --enable. Skills that follow the agentskills.io spec but aren't published to the Skills Hub can be added with npx skills add owner/repo, or cloned straight into your skills directory. Every entry on this page carries the exact command from its own README.
Updated 2026-08-20 · tested against Hermes v0.20.4. The picks are curated by hand — install commands are read out of each project's README rather than generated, and star counts are refreshed from the GitHub API on every build.