Does this skill support Zero Trust principles?

Yes, it treats identity as the new perimeter and evaluates systems based on continuous verification, least privilege access, and micro-segmentation.

How does this skill help with threat modeling?

It applies structured frameworks like STRIDE and PASTA to systematically identify potential threats—such as spoofing, tampering, and elevation of privilege—during the design phase of a project.

What is the benefit of the MITRE ATT&CK integration?

It allows the AI to map defensive controls to known real-world adversary tactics and techniques, helping security teams identify and close specific detection gaps.

Can it help with regulatory compliance?

Yes, it evaluates systems against industry standards such as NIST, SOC 2, and ISO 27001 to identify gaps in your security posture and recommend remediation steps.

Is this skill useful for incident response?

Absolutely. It helps investigate breaches, identify attack vectors, and design containment, eradication, and recovery strategies based on the 'Assume Breach' philosophy.

Cybersecurity Analyst

Name: Cybersecurity Analyst
Author: rysweet

byrysweet

•

Security & Testing

Conducts deep security audits and threat modeling using industry-standard frameworks to harden applications and infrastructure.

The Cybersecurity Analyst skill empowers Claude to act as a specialized security consultant, applying rigorous frameworks like STRIDE, MITRE ATT&CK, and the CIA triad to evaluate your system's security posture. It enables the proactive identification of vulnerabilities, analysis of attack surfaces, and development of risk mitigation strategies based on Zero Trust and defense-in-depth principles. Whether you are performing a code security review, investigating a potential incident, or designing a secure cloud architecture, this skill provides actionable insights to minimize residual risk and ensure compliance with standards like NIST and ISO 27001.

Key Features

01Advanced threat modeling using STRIDE, PASTA, and VAST methodologies.

02Comprehensive attack surface analysis to identify and minimize entry points.

0316 GitHub stars

04Zero Trust architecture evaluation for modern cloud and hybrid environments.

05Adversary behavior mapping via the MITRE ATT&CK framework.

06Vulnerability assessment based on CIA triad and CVSS risk scoring.

Use Cases

01Developing comprehensive incident response plans and recovery strategies.

02Performing proactive security architecture reviews for new system designs.

03Analyzing software code for common vulnerabilities and logic flaws.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rysweet/amplihack cybersecurity-analyst

For use in Claude.ai and ChatGPT

Download Skill