Malware Incident Communication Templates
Drafts structured malware incident notices for staff, executives, IT teams, customers and regulators.
- Repository
- mukul975/Anthropic-Cybersecurity-Skills
- Stars
- 35,430
- Licence
- Apache-2.0
- Files
- 7 files
What it does
Once installed, the agent can produce ready-to-fill communication templates for a malware incident such as ransomware or a wiper attack. It maps severity levels (P1 to P4) to notification timelines and audiences, and drafts internal notices, executive briefings, technical advisories with indicator-of-compromise sections, and regulatory notification letters. It can also run a small Python script that generates templates for a given case.
Great for
- Incident response teams standardizing how they communicate during an outbreak
- Security managers who want severity-based escalation rules written down
- Teams preparing communication playbooks before an incident happens
Skip it if
- Live incidents needing legal or regulatory advice: the templates are generic and do not replace counsel or the regulator's required format
- Organizations expecting automatic notifications: the scripts only generate text and do not send emails or alerts
Try asking
- “Draft an initial P1 ransomware notification for our IR team using our incident ID format”
- “Write an executive briefing for the CEO summarizing business impact of a wiper infection”
- “Create a technical advisory with IOC sections for IT teams to block a trojan's C2 domains”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.
building-malware-incident-communication-template.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip building-malware-incident-communication-template.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip building-malware-incident-communication-template.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Review the severity timelines against your own incident response policy before using them, since the skill's values are generic defaults and differ slightly between SKILL.md and the scripts
- Have legal and compliance review any regulatory or customer notification before sending
- Keep the generated files in a controlled location, since drafts can contain sensitive incident details
What's inside
- assets/template.md
- references/api-reference.md
- references/standards.md
- references/workflows.md
- scripts/agent.py
- scripts/process.py
- SKILL.md
Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.