Detect insider threat behavioral indicators including unusual data access, off-hours activity, mass file downloads, privilege abuse, and resignation-correlated data theft. Use when proactively threat-hunting for malicious or negligent insider activity, or when investigating a departing or disgruntled employee for potential data theft.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-insider-threat-behaviorsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-insider-threat-behaviors -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-insider-threat-behaviors -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/detecting-insider-threat-behaviorsgh skill install mukul975/Anthropic-Cybersecurity-Skills detecting-insider-threat-behaviorsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-insider-threat-behaviors ~/.claude/skills/detecting-insider-threat-behaviors # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-insider-threat-behaviors ~/.agents/skills/detecting-insider-threat-behaviors # Codex, Cursor, Gemini CLI, Copilot, OpenCode