Deploy MISP, configure threat feeds (MISP community, freetext, TAXII, CSV), and use the PyMISP API to programmatically fetch, add, and search events and IOCs, building automated collection pipelines that aggregate indicators from community and commercial sources. Use when gathering, storing, or correlating IOCs and threat intelligence, or when scripting MISP ingestion via PyMISP.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill collecting-threat-intelligence-with-mispnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill collecting-threat-intelligence-with-misp -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill collecting-threat-intelligence-with-misp -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/collecting-threat-intelligence-with-mispgh skill install mukul975/Anthropic-Cybersecurity-Skills collecting-threat-intelligence-with-mispgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/collecting-threat-intelligence-with-misp ~/.claude/skills/collecting-threat-intelligence-with-misp # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/collecting-threat-intelligence-with-misp ~/.agents/skills/collecting-threat-intelligence-with-misp # Codex, Cursor, Gemini CLI, Copilot, OpenCode