1.mukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0ai-agentsclaude-codecybersecurityincident-responsemitre-attackpenetration-testing+14 morePythonAPACHE-2.035K total4.3K forks+392 starsfrom 35,012 · score 5.97
2.devploit / php2shellCVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.cve-2026-109618cve-2026-109619exploitmod-phppenetration-testingphp+14 morePythonMIT275 total76 forks+106 starsfrom 161 · score 4.67
3.apache / calderaAutomated Adversary Emulation Platformadversary-emulationcalderasecurity-automationred-teammitre-attacksecurity-testing+1 morePythonAPACHE-2.07.5K total1.4K forks+19 starsfrom 7,464 · score 3.00
4.zero-lab-ai / skillsPortable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.agent-skillsai-securityblue-teamclaude-codecodexpenetration-testing+2 morePythonAPACHE-2.0286 total14 forks+4 starsfrom 282 · score 1.61
5.dolevf / graphql-copSecurity Auditor Utility for GraphQL APIssecuritypenetration-testingauditinggraphqlhackingred-team+2 morePythonMIT697 total103 forks+2 starsfrom 695 · score 1.10