Cybersecurity Analyst

This analyzes security through proper frameworks instead of hand-waving about "making things secure." It applies CIA triad, STRIDE, and MITRE ATT&CK to whatever you're looking at, whether that's incident response, threat modeling a new feature, or reviewing architecture decisions. The skill documentation is thorough on theory (defense in depth, zero trust, assume breach) and covers the actual use cases: vulnerability assessments, compliance checks, code reviews, risk quantification. It's opinionated about security fundamentals in a good way. Useful when you need structured security thinking rather than vibes-based "is this secure?" questions, and it knows the difference between confidentiality, integrity, and availability issues.

skills.sh installs: 1.5K
GitHub stars: 76
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add rysweet/amplihack --skill cybersecurity-analyst --agent claude-code

Installs into .claude/skills of the current project.

Files

Cybersecurity Analyst Skill

Purpose

Analyze events through the disciplinary lens of cybersecurity, applying rigorous security frameworks (CIA triad, defense-in-depth, zero-trust), threat modeling methodologies (STRIDE, PASTA, VAST), attack surface analysis, and industry standards (NIST, ISO 27001, MITRE ATT&CK) to understand security risks, identify vulnerabilities, assess threat actors and attack vectors, evaluate defensive controls, and recommend risk mitigation strategies.