Anthropic Cybersecurity Skills vs Sublime Security

Side-by-side comparison of features, pricing, and ratings

Analysis reviewed Live tool data as of 2026-10-18
Cross-checked through our multi-step verification ·
Saved

At a glance

DimensionAnthropic Cybersecurity SkillsSublime Security
PricingFree (open-source Apache 2.0)Paid (contact for pricing)
Target UserSecurity engineers, penetration testers, threat hunters using AI agentsEnterprise security teams and SOC analysts focused on email threats
Core Function817 structured cybersecurity skills for AI agents across 6 frameworksAI-driven email security (BEC, VEC, phishing) with custom detection rules
DeploymentCLI-based, works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI and 20+ platformsCloud platform, integrates with Microsoft 365 and Google Workspace
Open SourceYes (Apache 2.0)No (proprietary)
Best ForAutomating security tasks with AI agentsDetecting and responding to advanced email threats

Anthropic Cybersecurity Skills is the better choice for security professionals who want to supercharge AI agents with structured, open-source playbooks for free. Sublime Security wins for enterprise teams needing a dedicated, low-FP email security platform. Choose based on whether your need is agent automation (Anthropic) or email protection (Sublime).

Anthropic Cybersecurity Skills
Anthropic Cybersecurity Skills

Open-source library of 817 structured cybersecurity skill files your AI coding agent loads on demand, mapped to MITRE ATT&CK and licensed Apache 2.0.

Visit Website
Sublime Security
Sublime Security

Agentic email security that auto-triages reported phishing and writes custom detections for your SOC

Visit Website
Pricing
Free
Contact Sales
Plans
$0
$0
Popularity
27 views
7.5k views
Skill Level
Intermediate
Advanced
API Available
Platforms
PluginCLI
APIWeb
Categories
🕸️ Agent Frameworks & Orchestration🔐 Application & Code Security
🚨 Threat Detection & SOC
Features
817 structured cybersecurity skills across 29 domains (June 25, 2026 community count)
Progressive disclosure: ~40-token YAML frontmatter read first, full workflow body loaded only on match
MITRE ATT&CK technique IDs referenced in every skill
Maps to NIST CSF 2.0, MITRE ATLAS, D3FEND and NIST AI RMF where applicable
CVE references included where relevant
Each skill carries prerequisites, exact CLI commands, workflow steps and verification checks
Cloud Security: 60 skills; Threat Hunting: 55; Threat Intelligence: 50; Web App Security: 42
Network Security: 40; Malware Analysis: 39; Digital Forensics: 37; Security Operations: 36
Identity & Access: 35; SOC Operations: 33; Container Security: 30; OT/ICS Security: 28; API Security: 28
Incident Response: 25; Vulnerability Management: 25; Red Teaming: 24; Penetration Testing: 23
DevSecOps: 17; Endpoint Security: 17; Phishing Defense: 16
Works with Claude Code, GitHub Copilot, Cursor, Gemini CLI, OpenAI Codex CLI, Amp, Windsurf, Aider, Continue, Goose, Zed, Cline, Void, Cody, Kodu and 20+ platforms
Install via npx (`npx skills add mukul975/Anthropic-Cybersecurity-Skills`), git clone, or manual copy into the agent skills directory
Claude Code plugin marketplace install: `/plugin marketplace add mukul975/Anthropic-Cybersecurity-Skills`
Apache 2.0 license, agentskills.io standard compatible, Markdown/CLI only with no graphical interface
Autonomous Security Analyst (ASA) auto-triages user-reported phishing end to end
Autonomous Detection Engineer (ADÉ) authors backtested org-specific detections
One-click approval before any new detection goes live
Custom detections written in Sublime Script, a YARA-like language
Full transparency into every verdict: matched detections and signal analysis
Behavioral threat-hunting interface for proactive investigation
Automated response actions: quarantine, alert and remediation
Detects BEC and vendor email compromise
Detects credential phishing, callback phishing, QR code phishing, ICS phishing
Prompt injection and malware/ransomware detection in email
Email DLP for stopping sensitive data loss over email (GA)
Advanced graymail protection filtering bulk and newsletter noise (public beta, July 2026)
Native deployment over Microsoft 365 and Google Workspace mail
Free email analyzer plus analyzer API for ad-hoc message scans
API for programmatic access to detections and verdicts
Integrations
Claude Code
GitHub Copilot
Cursor
Gemini CLI
OpenAI Codex CLI
Amp
Windsurf
Aider
Continue
Goose
Zed
Cline
Void
Cody
Kodu
Microsoft 365
Google Workspace

What real users say: Anthropic Cybersecurity Skills vs Sublime Security

Not marketing copy and not our opinion — a structured sweep of public discussion (reviews, forums, communities and video comments), showing what people praise and what they complain about for each tool.

Anthropic Cybersecurity Skills

18 mentions across 5 sources · 45% positive — mixed (weighted across 5 sources)

Hacker News, YouTube, Product Hunt, GitHub, Lemmy

What users praise

  • • 817 skills across 29 security domains, including serious depth in cloud (60) and threat hunting (55)
  • • Every skill carries MITRE ATT&CK technique IDs; many map to NIST CSF 2.0 and ATLAS
  • • Progressive disclosure keeps token cost low — ~40-token frontmatter before full workflow body loads
  • • Works with Claude Code, Copilot, Cursor, Codex CLI, and 20+ Markdown-reading agents

What frustrates them

  • • Zero published field reports of the library used in a production SOC
  • • Skill counts shift between videos (753 → 754 → 817), complicating versioning and audits
  • • One open GitHub issue (Sept 2026) cites incomplete refs and incorrect ATT&CK mappings
  • • Requires intermediate agent-config skills; beginners will struggle to wire it up

Researched Sep 14, 2026

Sublime Security

20 mentions across 2 sources · 80% positive (weighted across 2 sources)

YouTube, Lemmy

What users praise

  • • Verdicts show matched detections and signal analysis — analysts can read why, not trust a score
  • • Sublime Script is a YARA-like language your engineers can inspect, test, and tune
  • • ASA auto-triages user-reported phishing end to end, cutting the abuse-mailbox backlog
  • • ADÉ authors backtested, environment-specific detections that land ready for one-click approval

What frustrates them

  • • Community footprint is thin — one video thread, and no independent Reddit or HN validation
  • • Vendor efficiency claims (80% faster, 70% fewer FPs) are unverified by third parties
  • • Tuning workload is real and continuous if no one owns the rule library
  • • Not set-and-forget — teams replacing a legacy SEG should expect an operational shift

Researched Oct 14, 2026

Who should pick which

  • Solo security researcher
    Pick: Anthropic Cybersecurity Skills

    Free, open-source, and provides 817 structured skills that can be used with various AI agents to automate research tasks.

  • Enterprise SOC analyst
    Pick: Sublime Security

    Sublime offers AI-driven email threat detection with low false positives, custom rules, and integration with M365 and Google Workspace, fitting enterprise workflows.

  • Penetration tester / Red teamer
    Pick: Anthropic Cybersecurity Skills

    The skills include MITRE ATT&CK technique IDs and CVE references, ideal for structuring red team operations with AI agents.

  • IT team managing email security
    Pick: Sublime Security

    Sublime is purpose-built for email security, with automated detection and response for BEC and phishing, complementing existing gateways.

  • Cloud security auditor
    Pick: Anthropic Cybersecurity Skills

    Anthropic covers 29 security domains and multiple frameworks (NIST CSF 2.0, MITRE ATT&CK), useful for cloud audits and compliance checks.

Frequently Asked Questions

Anthropic Cybersecurity Skills vs Sublime Security: which should you choose?

Anthropic Cybersecurity Skills is the better choice for security professionals who want to supercharge AI agents with structured, open-source playbooks for free. Sublime Security wins for enterprise teams needing a dedicated, low-FP email security platform. Choose based on whether your need is agent automation (Anthropic) or email protection (Sublime).

Is Anthropic Cybersecurity Skills officially supported by Anthropic?

No, it's a community-driven project and not affiliated with Anthropic.

Can Sublime Security be used with providers other than Microsoft 365 and Google Workspace?

Currently, it integrates only with M365 and Google Workspace.

Does Anthropic Cybersecurity Skills include a GUI?

No, it's CLI-only; users need comfort with command-line tools.

What is the pricing model for Sublime Security?

Contact sales; pricing is not publicly disclosed.

Can I use Anthropic Cybersecurity Skills with any AI agent?

It works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI, and 20+ platforms that support structured Markdown.

Does Sublime Security support custom detection rules?

Yes, using Sublime Script, a YARA-like language.

Which frameworks are included in Anthropic Cybersecurity Skills?

MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF, and MITRE F3.

Is Sublime Security suitable for small businesses?

It's best for mid-to-large enterprises; small teams may find it overkill and costly.

More Anthropic Cybersecurity Skills or Sublime Security comparisons

Explore each tool further

Browse these categories

Still deciding? Get the weekly AI tools brief

One email a week — new tools, honest comparisons, no spam.

Last reviewed: July 3, 2026