Annual Security Reports Aggregator
Find, fetch and compare cybersecurity annual reports from major vendors, with sourced figures
- Repository
- danielmiessler/LifeOS
- Stars
- 19,682
- Licence
- MIT
- Files
- 5 files
What it does
Once installed, the agent keeps a local catalog of several hundred annual cybersecurity reports from vendors such as CrowdStrike, Mandiant, IBM, Verizon and Microsoft. You can ask it to list reports in a category, download a summary of a specific vendor report, or compare trends such as ransomware across vendors, with each figure tied to its vendor, year and report. It can also refresh the catalog from a public GitHub list. It does not provide live threat feeds or CVE lookups.
Great for
- Security analysts or CISOs who want a quick cross-vendor view of annual threat and breach trends
- Students or researchers collecting sourced cybersecurity statistics
- Anyone who needs to know which vendor reports exist in a given category
Skip it if
- Real-time threat intelligence or live CVE lookups, which the skill explicitly excludes
- Decisions that need current data: reports lag the data they cover (a 2026 report covers 2025 data)
- Obtaining full vendor PDFs, since many require registration and the skill saves only summaries
Try asking
- “Update the annual reports”
- “What threat reports are available?”
- “Analyze ransomware reports from the major vendors”
- “Fetch the Verizon DBIR report summary”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 5 original files, the MIT licence and an attribution note.
AnnualReports.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip AnnualReports.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip AnnualReports.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Run the proof commands in Setup.md after install to confirm the tools work before relying on them
- Ask for a specific vendor and year so the analysis stays traceable to named reports
- Check the stated publication lag and the list of vendors left out before drawing conclusions
What's inside
- Setup.md
- SKILL.md
- Tools/FetchReport.ts
- Tools/ListSources.ts
- Tools/UpdateSources.ts
Redistributed unmodified from danielmiessler/LifeOS under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.