How agricidaniel/claude-cybersecurity works
claude-cybersecurity is a Claude Code security-audit skill, not a standalone scanning service. A user invokes the skill against a project, selects a full, quick, diff, or focused audit, and the documented orchestrator coordinates eight specialist agents across security dimensions. The repository also supplies reference knowledge for vulnerability classes, language and IaC patterns, threat intelligence, scoring, compliance, suppression, and report formatting. The README documents these capabilities and the orchestrator’s role; no source excerpts were provided, so implementation-level calls and agent-to-reference links are not asserted.
Main entry points: SKILL.md Audit orchestrator · vulnerability-taxonomy.md Vulnerability review · iac-patterns IaC security · threat-intelligence.md Threat intelligence
Components 16
Audit workflow
- Audit orchestrator
skills/cybersecurity/SKILL.md
Security analysis
- Specialist agents
skills/cybersecurity/SKILL.md - Vulnerability review
skills/cybersecurity/references/vulnerability-taxonomy.md - Authorization review
skills/cybersecurity/SKILL.md - Secrets and supply chain
skills/cybersecurity/SKILL.md - IaC security
skills/cybersecurity/references/iac-patterns - Threat intelligence
skills/cybersecurity/references/threat-intelligence.md - AI code and logic
skills/cybersecurity/SKILL.md
Reference knowledge
- Language patterns
skills/cybersecurity/references/language-patterns - Semgrep patterns
skills/cybersecurity/references/semgrep-patterns.md - Compliance mapping
skills/cybersecurity/references/compliance-matrix.md - False-positive rules
skills/cybersecurity/references/false-positive-suppression.md
Assessment results
- Finding scoring
skills/cybersecurity/references/scoring-rubric.md - Audit report
skills/cybersecurity/references/report-template.md
Other components
- Auditor
- Project codebase
Connections 15
- Auditor → Audit orchestrator: invokes
README.md - Audit orchestrator → Project codebase: audits
README.md - Audit orchestrator → Specialist agents: spawns eight
README.md - Specialist agents → Vulnerability review: reviews flaws
README.md - Specialist agents → Authorization review: checks controls
README.md - Specialist agents → Secrets and supply chain: reviews exposure
README.md - Specialist agents → IaC security: scans IaC
README.md - Specialist agents → Threat intelligence: checks threats
README.md - Specialist agents → AI code and logic: reviews patterns
README.md - Audit orchestrator → Language patterns: uses patterns
- Audit orchestrator → Semgrep patterns: uses patterns
- Audit orchestrator → Compliance mapping: maps compliance
README.md - Audit orchestrator → False-positive rules: suppresses false positives
README.md - Audit orchestrator → Finding scoring: scores findings
README.md - Audit orchestrator → Audit report: formats report