Uses PyMISP (the official MISP REST API library) to create events with structured IOCs (IPs, domains, hashes, URLs), enrich them with MITRE ATT&CK tags and galaxy clusters, manage sharing groups and distribution levels, search existing intelligence, and export in STIX 2.1 format.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-threat-intelligence-sharing-with-mispnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-threat-intelligence-sharing-with-misp -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-threat-intelligence-sharing-with-misp -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-threat-intelligence-sharing-with-mispgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-threat-intelligence-sharing-with-mispgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-threat-intelligence-sharing-with-misp ~/.claude/skills/performing-threat-intelligence-sharing-with-misp # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-threat-intelligence-sharing-with-misp ~/.agents/skills/performing-threat-intelligence-sharing-with-misp # Codex, Cursor, Gemini CLI, Copilot, OpenCode