Stand up MISP, enable and cache curated threat feeds (CIRCL, abuse.ch, Feodo Tracker), apply warninglists to suppress false positives, query indicators with PyMISP, and export attributes as auto-generated Suricata/Sigma/Wazuh detection rules.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill operationalizing-misp-threat-feedsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill operationalizing-misp-threat-feeds -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill operationalizing-misp-threat-feeds -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/operationalizing-misp-threat-feedsgh skill install mukul975/Anthropic-Cybersecurity-Skills operationalizing-misp-threat-feedsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/operationalizing-misp-threat-feeds ~/.claude/skills/operationalizing-misp-threat-feeds # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/operationalizing-misp-threat-feeds ~/.agents/skills/operationalizing-misp-threat-feeds # Codex, Cursor, Gemini CLI, Copilot, OpenCode