Anthropic-Cybersecurity-Skills vs ragflow

ragflow is much bigger: 90.1k stars against 32.2k. Over the days we have tracked them Anthropic-Cybersecurity-Skills moved +40.1% and ragflow +5.7%, so Anthropic-Cybersecurity-Skills is growing faster right now.

They split the axes: Anthropic-Cybersecurity-Skills leads on setup ease, ragflow on model freedom.

Stars and commit dates come from our own daily tracking. The six axes are read off each project's documentation by our review pipeline, so they describe what a project says about itself, not what we measured in its code.

Where they stand today

Maps 817 structured cybersecurity skills to six major industry frameworks (e.g., MITRE ATT&CK and MITRE F3), providing practitioner-grade, cross-framework workflows for AI agents.

Stars
32.2k
Tracked growth
+40.1%
Maturity
Last commit
5d ago
Language
Python
License
Apache-2.0
Cost to run
Free to clone; your model/API costs

Combines a production-grade RAG engine with agent orchestration and template-based document understanding to provide an agentic context layer for LLMs.

Stars
90.1k
Tracked growth
+5.7%
Maturity
Last commit
8h ago
Language
Go
License
Apache-2.0
Cost to run
Your API key (paid LLMs); self-host or use cloud
0%+40%69 tracked days
mukul975/Anthropic-Cybersecurity-Skillsinfiniflow/ragflow

Six axes, head to head

Each axis runs 0 to 5. The label under a score is what that project's own docs claim, not a category average.

AxisAnthropic-Cybersecurity-Skillsragflow
Context depth
How much of your codebase it sees before it answers: the open diff, the diff plus related files, or the whole repository.
Indexed frontmatter + selected skills
Whole-repo analysis
Noise control
How it keeps output volume down — severity thresholds, deduplication, incremental runs over new commits only.
Matching + verification
Re-ranking & citations
Customization
How far it bends to your team: custom rules, prompts, style guides, per-path config.
Editable skill YAMLs
Config files & templates
Privacy
Whether your code stays on your own infrastructure: fully local, self-hostable, or cloud API only.
Self-hostable
Self-hostable
Model freedom
Whether you can point it at any provider, or it is wired to one.
Multi-provider support
Bring-your-own key
Setup ease
What it takes to get a first useful run out of it.
One-command add
Multi-service deploy

Which one to pick

Pick Anthropic-Cybersecurity-Skills if…

Comprehensive framework coverage — choose this when you need a production-ready, multi-framework cybersecurity skills library to plug directly into agents.

  • Setup ease: One-command add (5/5 against 1/5)
Runs in cli, ide, coding-agent-plugin, web-app. Works with anthropic, openai, gemini.

Pick ragflow if…

Self-hostable — choose RAGFlow when you need a production-ready, agentic RAG platform with template-based ingestion, grounded citations, and configurable LLM/embedding providers.

  • Model freedom: Bring-your-own key (5/5 against 3/5)
Runs in web-app. Works with byok, openai, gemini.

What people want from each one

Questions people ask

Is Anthropic-Cybersecurity-Skills better than ragflow?

They split the axes: Anthropic-Cybersecurity-Skills leads on setup ease, ragflow on model freedom. Anthropic-Cybersecurity-Skills is worth picking when comprehensive framework coverage — choose this when you need a production-ready, multi-framework cybersecurity skills library to plug directly into agents.

Which of Anthropic-Cybersecurity-Skills and ragflow keeps my code private?

Anthropic-Cybersecurity-Skills: Self-hostable (4/5). ragflow: Self-hostable (4/5).

What does each one cost to run?

Anthropic-Cybersecurity-Skills: Free to clone; your model/API costs. ragflow: Your API key (paid LLMs); self-host or use cloud.

Full profiles: mukul975/Anthropic-Cybersecurity-Skills and infiniflow/ragflow. Everything else in RAG & retrieval.