Is this used for automated IOC sharing?

No, this skill is designed for 'finished intelligence'—analyzed reports that provide context. Raw IOC distribution should still be handled via TIP or MISP platforms.

How does it handle urgent threat notifications?

The skill features a 'Flash Report' workflow designed to produce 1-page urgent notifications within 2 hours of a threat identification, such as a new zero-day.

Can it generate reports for non-technical executives?

Yes, it includes a specific workflow for Strategic Intelligence Reports that focuses on business impact, risk trends, and high-level decision-making with minimal jargon.

What reporting standards does this skill support?

The skill supports the Traffic Light Protocol (TLP) for sharing, ICD 203 for analytical confidence levels, and maps findings to NIST CSF and MITRE ATT&CK.

Threat Intelligence Reporting

Name: Threat Intelligence Reporting
Author: mukul975

bymukul975

•

4,121

•

安全与测试

Generates structured cyber threat intelligence reports tailored for executive, operational, and tactical stakeholders using industry-standard frameworks.

This skill empowers Claude to transform raw security data into professional, finished intelligence products. It provides structured workflows for creating Strategic, Operational, and Tactical reports, as well as urgent Flash Reports for emerging zero-day threats. By incorporating intelligence writing standards like ICD 203 confidence qualifiers and the Traffic Light Protocol (TLP) for dissemination control, this skill ensures that threat analysis is accurate, audience-appropriate, and actionable. It is particularly useful for security leaders needing to communicate risk to the board or SOC teams requiring technical mitigation guidance mapped to MITRE ATT&CK and NIST CSF.

主要功能

01Integration of ICD 203 analytical standards and confidence qualifiers

02Mapping of technical findings to NIST CSF and MITRE ATT&CK frameworks

034,121 GitHub stars

04Rapid Flash Report templates for urgent zero-day and ransomware notifications

05Multi-tier report generation for Strategic, Operational, and Tactical audiences

06Adherence to TLP (Traffic Light Protocol) for secure information sharing

使用场景

01Synthesizing weekly threat landscape summaries for CISO and security leadership

02Drafting technical bulletins for SOC analysts including YARA rules and IOCs

03Creating executive briefings on sector-specific threat trends and business impact

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills generating-threat-intelligence-reports

For use in Claude.ai and ChatGPT

主要功能

01Integration of ICD 203 analytical standards and confidence qualifiers

02Mapping of technical findings to NIST CSF and MITRE ATT&CK frameworks

034,121 GitHub stars

04Rapid Flash Report templates for urgent zero-day and ransomware notifications

05Multi-tier report generation for Strategic, Operational, and Tactical audiences

06Adherence to TLP (Traffic Light Protocol) for secure information sharing

使用场景

01Synthesizing weekly threat landscape summaries for CISO and security leadership

02Drafting technical bulletins for SOC analysts including YARA rules and IOCs

03Creating executive briefings on sector-specific threat trends and business impact

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills generating-threat-intelligence-reports

For use in Claude.ai and ChatGPT