# Defense.com Threat Analysis agent skills for Claude Code, Cursor and RevampKey

> Ready-made Defense.com Threat Analysis playbooks for AI agents: build a security awareness plan from your real threat exposure, investigate a threat in Defense.com with AI, triage your Defense.com threat queue with AI. Free SKILL.md files for Claude Code, Cursor and Codex, or one click in RevampKey.

## Skills

- [Use the Defense.com Threat Analysis connector safely](https://revampkey.com/marketplace/defense-com-threat-analysis/skills/essentials.md): Explains how to point the AI at the right account and scope, choose between threat, detection, workload and training tools, and avoid changing training records without your approval.
- [Build a security awareness plan from your real threat exposure](https://revampkey.com/marketplace/defense-com-threat-analysis/skills/security-training-plan.md): Turns the threats Defense.com shows you as most serious into training questions and a short session plan. It asks for your approval before starting a session or recording any answers.
- [Investigate a threat in Defense.com with AI](https://revampkey.com/marketplace/defense-com-threat-analysis/skills/threat-investigation.md): Works through one threat or keyword cluster end to end, checking its details, source, affected workloads and related detections. It ends with a write-up that separates what is confirmed from what is still open, and it asks before changing anything.
- [Triage your Defense.com threat queue with AI](https://revampkey.com/marketplace/defense-com-threat-analysis/skills/threat-triage.md): Ranks open Defense.com threats by severity, spread and ownership, and splits them into what to act on today and what can wait. It reads the queue and does not change assignments or threat state without asking.

## Install

- RevampKey: connect Defense.com Threat Analysis at https://revampkey.com/marketplace/defense-com-threat-analysis; the skills come with it.
- Any Agent Skills tool, into the current project:

```bash
for s in essentials security-training-plan threat-investigation threat-triage; do
  curl -fsSL --create-dirs -o .agents/skills/defense-com-threat-analysis-$s/SKILL.md https://revampkey.com/marketplace/defense-com-threat-analysis/skills/$s/SKILL.md
done
```

### What is a Defense.com Threat Analysis agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Defense.com Threat Analysis skill describes one job, which Defense.com Threat Analysis tools to use in which order, what to check first and when to stop and ask you.

### Do the Defense.com Threat Analysis skills change anything on their own?

4 of the 4 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Defense.com Threat Analysis.

### Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Defense.com Threat Analysis; elsewhere you copy the folders into your project or skills directory.

### Do I need the Defense.com Threat Analysis MCP server too?

Yes. The skills tell the agent how to do the work; the Defense.com Threat Analysis MCP server gives it the tools to do it. The Defense.com Threat Analysis MCP setup guide covers every client.

MCP setup guide: https://revampkey.com/marketplace/defense-com-threat-analysis.md