Anthropic-Cybersecurity-Skills vs ragflow
ragflow is much bigger: 90.1k stars against 32.2k. Over the days we have tracked them Anthropic-Cybersecurity-Skills moved +40.1% and ragflow +5.7%, so Anthropic-Cybersecurity-Skills is growing faster right now.
They split the axes: Anthropic-Cybersecurity-Skills leads on setup ease, ragflow on model freedom.
Stars and commit dates come from our own daily tracking. The six axes are read off each project's documentation by our review pipeline, so they describe what a project says about itself, not what we measured in its code.
Where they stand today
Maps 817 structured cybersecurity skills to six major industry frameworks (e.g., MITRE ATT&CK and MITRE F3), providing practitioner-grade, cross-framework workflows for AI agents.
- Stars
- 32.2k
- Tracked growth
- +40.1%
- Maturity
- ●●●●●
- Last commit
- 5d ago
- Language
- Python
- License
- Apache-2.0
- Cost to run
- Free to clone; your model/API costs
Combines a production-grade RAG engine with agent orchestration and template-based document understanding to provide an agentic context layer for LLMs.
- Stars
- 90.1k
- Tracked growth
- +5.7%
- Maturity
- ●●●●●
- Last commit
- 8h ago
- Language
- Go
- License
- Apache-2.0
- Cost to run
- Your API key (paid LLMs); self-host or use cloud
Six axes, head to head
Each axis runs 0 to 5. The label under a score is what that project's own docs claim, not a category average.
| Axis | Anthropic-Cybersecurity-Skills | ragflow |
|---|---|---|
Context depth How much of your codebase it sees before it answers: the open diff, the diff plus related files, or the whole repository. | ●●●●● Indexed frontmatter + selected skills | ●●●●● Whole-repo analysis |
Noise control How it keeps output volume down — severity thresholds, deduplication, incremental runs over new commits only. | ●●●●● Matching + verification | ●●●●● Re-ranking & citations |
Customization How far it bends to your team: custom rules, prompts, style guides, per-path config. | ●●●●● Editable skill YAMLs | ●●●●● Config files & templates |
Privacy Whether your code stays on your own infrastructure: fully local, self-hostable, or cloud API only. | ●●●●● Self-hostable | ●●●●● Self-hostable |
Model freedom Whether you can point it at any provider, or it is wired to one. | ●●●●● Multi-provider support | ●●●●● Bring-your-own key |
Setup ease What it takes to get a first useful run out of it. | ●●●●● One-command add | ●●●●● Multi-service deploy |
Which one to pick
Pick Anthropic-Cybersecurity-Skills if…
Comprehensive framework coverage — choose this when you need a production-ready, multi-framework cybersecurity skills library to plug directly into agents.
- Setup ease: One-command add (5/5 against 1/5)
Pick ragflow if…
Self-hostable — choose RAGFlow when you need a production-ready, agentic RAG platform with template-based ingestion, grounded citations, and configurable LLM/embedding providers.
- Model freedom: Bring-your-own key (5/5 against 3/5)
What people want from each one
mukul975/Anthropic-Cybersecurity-Skills
Hacker News: Anthropic-Cybersecurity-Skills:817 structured cybersecurity skills for AI agents drew 5 points and 0 comments.
infiniflow/ragflow
Hacker News: RAGFlow is an open-source RAG engine based on OCR and document parsing drew 230 points and 53 comments.
Questions people ask
Is Anthropic-Cybersecurity-Skills better than ragflow?
They split the axes: Anthropic-Cybersecurity-Skills leads on setup ease, ragflow on model freedom. Anthropic-Cybersecurity-Skills is worth picking when comprehensive framework coverage — choose this when you need a production-ready, multi-framework cybersecurity skills library to plug directly into agents.
Which of Anthropic-Cybersecurity-Skills and ragflow keeps my code private?
Anthropic-Cybersecurity-Skills: Self-hostable (4/5). ragflow: Self-hostable (4/5).
What does each one cost to run?
Anthropic-Cybersecurity-Skills: Free to clone; your model/API costs. ragflow: Your API key (paid LLMs); self-host or use cloud.
Full profiles: mukul975/Anthropic-Cybersecurity-Skills and infiniflow/ragflow. Everything else in RAG & retrieval.