Develops precise YARA and YARA-X rules for malware detection by identifying unique strings, byte sequences, PE header traits, and behavioral indicators in unpacked malware artifacts while minimizing false positives. Use when building detection signatures for threat hunting, classifying malware families, or authoring rules from IOCs such as C2 URLs, mutex names, and encryption constants.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-yara-rule-development-for-detectionnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-yara-rule-development-for-detection -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-yara-rule-development-for-detection -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-yara-rule-development-for-detectiongh skill install mukul975/Anthropic-Cybersecurity-Skills performing-yara-rule-development-for-detectiongit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-yara-rule-development-for-detection ~/.claude/skills/performing-yara-rule-development-for-detection # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-yara-rule-development-for-detection ~/.agents/skills/performing-yara-rule-development-for-detection # Codex, Cursor, Gemini CLI, Copilot, OpenCode