MITRE ATT&CK Skill

SkillDev tools

MITRE ATT&CK framework mapping and analysis

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the MITRE ATT&CK Skill skill

What this skill tells your AI

The instructions your AI receives, as published by a5c-ai/babysitter in library/specializations/security-research/skills/mitre-attack/SKILL.md and read by ahel’s review.

Overview

This skill provides MITRE ATT&CK framework mapping, analysis, and adversary emulation capabilities.

Capabilities

Map TTPs to ATT&CK techniques
Generate ATT&CK Navigator layers
Query ATT&CK STIX data
Create attack patterns and campaigns
Analyze technique coverage
Generate detection mappings
Support ATT&CK ICS and Mobile
Create adversary emulation plans

Target Processes

red-team-operations.js
purple-team-exercise.js
threat-intelligence-research.js
malware-analysis.js

Dependencies

ATT&CK STIX data (via TAXII or local)
ATT&CK Navigator
mitreattack-python library
Python 3.x

Usage Context

This skill is essential for:

Adversary emulation planning
Detection gap analysis
Threat intelligence correlation
Red team operation planning
Security posture assessment

Integration Notes

Supports all ATT&CK matrices (Enterprise, Mobile, ICS)
Can generate Navigator layers for visualization
Integrates with threat intelligence platforms
Maps to detection rules and mitigations
Supports campaign and group analysis

Signals

GitHub stars: 2k
Forks: 112
Last commit: Sep 2026

Advanced

Item type: skill
Key: mitre-att-ck-skill
Source: github.com/a5c-ai/babysitter

github.com/a5c-ai/babysitter