Home / Skills / csf-mapping

csf-mapping

Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover). Produce a gap analysis, current/target tier assessment, and roadmap in the governance language that boards, auditors, and CISOs actually use. Use when the user mentions 'NIST CSF,' 'CSF 2.0,' 'cybersecurity framework,' 'security posture,' 'governance mapping,' 'CSF gap analysis,' 'CSF tiers,' 'cybersecurity maturity,' 'security roadmap,' 'CISO report,' 'board reporting,' 'security program,' or needs to translate technical findings into governance language.

ScannedSkillSource: GitHub

426 stars +6 this week Updated 5mo ago License MIT Context ≈150 tokens always loaded

55popular

Why this score

Stars

11/35

Usage (forks)

4/15

Upkeep

15/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 426 stars are split between them (about 43 each) for scoring.

Popularity score: 55/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 21, 2026 at commit c9ade0349f8e, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This onecsf-mapping briiirussell/cybersecurity-skills · Skill	55	★ 426	≈150 always	5mo ago
token-mapping arla6ka/design.how · Skill Both about mapping and map	60	★ 141	≈79 always	16d ago
compliance-mapping ADScanPro/Claude-AD · Skill Both about mapping	58	★ 212	≈27 always	2mo ago
vs-alias-mapping volcengine/SearchCLI · Skill Both about mapping and mention	68	★ 1.2k	≈42 always	19d ago
assumption-mapping itseffi/agentic-os · Skill Both about mapping	60	★ 117	≈36 always	28d ago
journey-mapping cuellarfr/design-skills · Skill Both about mapping and map	53	★ 107	≈56 always	1mo ago

Install

mkdir -p .claude/skills/csf-mapping

curl -sL https://codeload.github.com/briiirussell/cybersecurity-skills/tar.gz/c9ade0349f8ecd5c9c68a82a05d2b6012c5fa1d7 | tar -xz -C .claude/skills/csf-mapping --strip-components=3 "cybersecurity-skills-c9ade0349f8ecd5c9c68a82a05d2b6012c5fa1d7/skills/csf-mapping"

To remove it later:

rm -rf .claude/skills/csf-mapping

npx skills add briiirussell/cybersecurity-skills --skill csf-mapping

Pinned to commit c9ade0349f8e as listed by GitHub.

Context cost: ≈150 tokens loaded every session (name and description), plus ≈3.0k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Security › Security review Product › Specs & roadmaps

Facts

Repo: briiirussell/cybersecurity-skills
Stars: 426
Forks: 60
Last push: 2026-05-27 (5mo ago)
License: MIT
Owner: briiirussell · since 2017
Language: JavaScript
Works with: Claude Code, Skills CLI