CTI Skills

CTI Skills is a free, open-source collection of 75 cyber threat intelligence capabilities designed for AI coding assistants including Claude Code, Cursor, Codex, and Windsurf. Users can investigate suspicious indicators, profile threat actors, and generate security reports by asking questions in plain English. The assistant automatically queries multiple threat databases like VirusTotal, Shodan, and AbuseIPDB, then synthesizes findings into structured analyst-format reports.

Built for security practitioners, the pack handles indicator lookups, OSINT methodology, detection rule writing, and intelligence reporting. Version 1.14 adds Microsoft Sentinel integration for querying organizational logs. Installation requires two commands, and most data sources offer free tiers. The maker states it was built with Claude Code.