AI Cybersecurity Skills Toolkit
A modular set of AI agent skills that automate core security-management work — phishing triage, incident response, control reviews, and program maturity assessment.
Overview
Built a toolkit of reusable AI agent skills that operationalize day-to-day security work through automation. Each skill is a self-contained, documented module (SKILL.md) designed for Claude Code and agent-skills-compatible runtimes, with a GitHub Actions workflow that validates every skill on change.
The project sits at the intersection of security engineering and program management: the engineering is in packaging repeatable, framework-aligned workflows as agents, while the value is in accelerating the management functions that typically consume the most analyst and leadership time.
Security Management Capabilities
- Phishing Triage — automated email analysis with IOC extraction and risk scoring
- Incident Response Runbook — end-to-end incident workflow from detection through closure
- Security Control Review — policy and control assessment against risk frameworks
- CMMI Maturity Assessment — process maturity evaluation with improvement roadmaps
- Cyber Program Navigator — full program assessment mapped to NIST CSF 2.0 and CIS v8
Key Accomplishments
- Designed a modular skill architecture so capabilities can be added or reused independently
- Aligned assessment skills to recognized frameworks (NIST CSF 2.0, CIS v8, CMMI)
- Automated governance-heavy tasks — control reviews and maturity scoring — to speed leadership decisions
- Added CI validation to keep every skill well-formed and reliable
Technologies
Claude Code / agent skills, GitHub Actions, NIST CSF 2.0, CIS v8, CMMI