[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ET3PSHBF9G2FNXYDR8Q2WY":3,"skill-same:01M6ET3PSHBF9G2FNXYDR8Q2WY":106},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":39,"linkOnly":40,"markdownContent":41,"markdownBody":42,"frontMatter":43,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":6,"ownerHtmlUrl":54,"ownerBlogUrl":6,"ownerDescription":55,"updatedAt":56,"install":57,"resources":70},"01M6ET3PSHBF9G2FNXYDR8Q2WY","configuring-windows-event-logging-for-detection",null,"Configures Windows Event Logging with advanced audit policies to generate high-fidelity security events for threat detection and forensic investigation. Use when enabling audit policies for logon events, process creation, privilege use, and object access to feed SIEM detection rules. Activates for requests involving Windows audit policy, event log configuration, security logging, or detection-oriented logging.","luokai0\u002Fai-agent-skills-by-luo-kai","luokai0","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F266954973?v=4","01M6E16VNT42JB8B3X3254QWJ7","luo kai","01M6E16VTFVP6S5XJF1V1MPV90",14,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38],"windows","logging","event","configuring windows event logging for detection","detection","advanced","policy","with","creation","log","use","Rules","access","audit-policy","event-logging","windows-security","detection-engineering","endpoint-security","siem","cybersecurity","2026-11-10 10:12:30",false,"---\nname: configuring-windows-event-logging-for-detection\ndescription: >\n  Configures Windows Event Logging with advanced audit policies to generate high-fidelity security\n  events for threat detection and forensic investigation. Use when enabling audit policies for\n  logon events, process creation, privilege use, and object access to feed SIEM detection rules.\n  Activates for requests involving Windows audit policy, event log configuration, security\n  logging, or detection-oriented logging.\ndomain: cybersecurity\nsubdomain: endpoint-security\ntags: [endpoint, windows-security, event-logging, audit-policy, detection-engineering]\nversion: 1.0.0\nauthor: mahipal\nlicense: Apache-2.0\n---\n# Configuring Windows Event Logging for Detection\n\n## When to Use\n\nUse this skill when:\n- Configuring Windows Advanced Audit Policy for security monitoring\n- Enabling process creation auditing with command line logging (Event 4688)\n- Setting up logon\u002Flogoff auditing for authentication monitoring\n- Sizing event log storage and forwarding to SIEM platforms\n\n**Do not use** for Sysmon configuration (separate skill) or Linux audit logging.\n\n## Prerequisites\n\n- Windows Server or Windows 10\u002F11 systems with Group Policy management access\n- Active Directory environment with Group Policy Object (GPO) creation privileges\n- SIEM platform configured to receive Windows Event Log forwarding\n- Understanding of Windows security event IDs and audit categories\n\n## Workflow\n\n### Step 1: Configure Advanced Audit Policy via GPO\n\n```\nComputer Configuration → Windows Settings → Security Settings\n  → Advanced Audit Policy Configuration → Audit Policies\n\nRecommended settings:\nAccount Logon:\n  - Audit Credential Validation: Success, Failure\n  - Audit Kerberos Authentication: Success, Failure\n\nAccount Management:\n  - Audit Security Group Management: Success\n  - Audit User Account Management: Success, Failure\n\nLogon\u002FLogoff:\n  - Audit Logon: Success, Failure\n  - Audit Logoff: Success\n  - Audit Special Logon: Success\n  - Audit Other Logon\u002FLogoff Events: Success, Failure\n\nObject Access:\n  - Audit File Share: Success, Failure\n  - Audit Removable Storage: Success, Failure\n  - Audit SAM: Success\n\nPolicy Change:\n  - Audit Audit Policy Change: Success, Failure\n  - Audit Authentication Policy Change: Success\n\nPrivilege Use:\n  - Audit Sensitive Privilege Use: Success, Failure\n\nDetailed Tracking:\n  - Audit Process Creation: Success\n  - Audit DPAPI Activity: Success, Failure\n```\n\n### Step 2: Enable Command Line in Process Creation Events\n\n```powershell\n# Registry: Enable command line logging in Event 4688\nNew-ItemProperty -Path \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Audit\" `\n  -Name ProcessCreationIncludeCmdLine_Enabled -Value 1 -PropertyType DWORD -Force\n\n# GPO: Computer Configuration → Administrative Templates → System → Audit Process Creation\n# \"Include command line in process creation events\" → Enabled\n```\n\n### Step 3: Configure Event Log Sizes\n\n```powershell\n# Increase Security log to 1 GB (default 20 MB is insufficient)\nwevtutil sl Security \u002Fms:1073741824\n\n# Increase PowerShell Operational log\nwevtutil sl \"Microsoft-Windows-PowerShell\u002FOperational\" \u002Fms:536870912\n\n# Set log retention to overwrite as needed\nwevtutil sl Security \u002Frt:false\n\n# Configure via GPO:\n# Computer Configuration → Administrative Templates → Windows Components\n#   → Event Log Service → Security\n# Maximum log file size (KB): 1048576\n```\n\n### Step 4: Configure Windows Event Forwarding (WEF)\n\n```powershell\n# On collector server:\nwecutil qc \u002Fq\n\n# Create subscription for high-value events:\n# Event IDs: 4624 (logon), 4625 (failed logon), 4688 (process create),\n# 4672 (special privilege), 4720 (user created), 4728 (group membership),\n# 7045 (service installed), 1102 (log cleared)\n\n# On source endpoints (GPO):\n# Configure WinRM: winrm quickconfig\n# Configure event forwarding: Computer Configuration → Admin Templates\n#   → Windows Components → Event Forwarding\n# Configure target Subscription Manager: Server=http:\u002F\u002Fcollector:5985\u002Fwsman\u002FSubscriptionManager\u002FWEC\n```\n\n### Step 5: Key Event IDs for Detection\n\n```\nAuthentication Events:\n  4624 - Successful logon (Type 2=Interactive, 3=Network, 10=RemoteInteractive)\n  4625 - Failed logon attempt\n  4648 - Logon using explicit credentials (RunAs, pass-the-hash indicator)\n  4672 - Special privileges assigned (admin logon)\n  4776 - NTLM credential validation\n\nProcess Events:\n  4688 - Process creation (with command line if enabled)\n  4689 - Process termination\n\nAccount Events:\n  4720 - User account created\n  4722 - User account enabled\n  4724 - Password reset attempted\n  4728 - Member added to security group\n  4732 - Member added to local group\n  4756 - Member added to universal group\n\nService\u002FSystem Events:\n  7045 - New service installed (persistence indicator)\n  1102 - Audit log cleared (evidence tampering)\n  4697 - Service installed in the system\n\nLateral Movement Indicators:\n  4648 + 4624(Type 3) - Credential-based lateral movement\n  5140 - Network share accessed\n  5145 - Network share access check (detailed file share)\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|-----------|\n| **Advanced Audit Policy** | Granular audit subcategories (58 subcategories vs. 9 basic categories) |\n| **Event ID 4688** | Process creation event; essential for tracking execution on endpoints |\n| **WEF** | Windows Event Forwarding; centralized log collection without third-party agents |\n| **Logon Type** | Numeric code indicating authentication method (2=interactive, 3=network, 10=RDP) |\n\n## Tools & Systems\n\n- **Windows Event Forwarding (WEF)**: Built-in centralized log collection\n- **NXLog**: Open-source log forwarding agent for Windows events\n- **Winlogbeat**: Elastic Agent for shipping Windows event logs to Elasticsearch\n- **Palantir WEF Configuration**: Open-source WEF subscription templates\n\n## Common Pitfalls\n\n- **Using basic audit policy instead of advanced**: Basic and advanced audit policies conflict. Always use advanced audit policy exclusively.\n- **Default log size too small**: 20 MB Security log fills in minutes on busy servers. Set minimum 1 GB.\n- **Missing command line logging**: Event 4688 without command line content has minimal detection value. Always enable ProcessCreationIncludeCmdLine_Enabled.\n- **Not forwarding logs**: Local event logs are lost when endpoints are wiped by ransomware. Forward to centralized SIEM immediately.\n","# Configuring Windows Event Logging for Detection\n\n## When to Use\n\nUse this skill when:\n- Configuring Windows Advanced Audit Policy for security monitoring\n- Enabling process creation auditing with command line logging (Event 4688)\n- Setting up logon\u002Flogoff auditing for authentication monitoring\n- Sizing event log storage and forwarding to SIEM platforms\n\n**Do not use** for Sysmon configuration (separate skill) or Linux audit logging.\n\n## Prerequisites\n\n- Windows Server or Windows 10\u002F11 systems with Group Policy management access\n- Active Directory environment with Group Policy Object (GPO) creation privileges\n- SIEM platform configured to receive Windows Event Log forwarding\n- Understanding of Windows security event IDs and audit categories\n\n## Workflow\n\n### Step 1: Configure Advanced Audit Policy via GPO\n\n```\nComputer Configuration → Windows Settings → Security Settings\n  → Advanced Audit Policy Configuration → Audit Policies\n\nRecommended settings:\nAccount Logon:\n  - Audit Credential Validation: Success, Failure\n  - Audit Kerberos Authentication: Success, Failure\n\nAccount Management:\n  - Audit Security Group Management: Success\n  - Audit User Account Management: Success, Failure\n\nLogon\u002FLogoff:\n  - Audit Logon: Success, Failure\n  - Audit Logoff: Success\n  - Audit Special Logon: Success\n  - Audit Other Logon\u002FLogoff Events: Success, Failure\n\nObject Access:\n  - Audit File Share: Success, Failure\n  - Audit Removable Storage: Success, Failure\n  - Audit SAM: Success\n\nPolicy Change:\n  - Audit Audit Policy Change: Success, Failure\n  - Audit Authentication Policy Change: Success\n\nPrivilege Use:\n  - Audit Sensitive Privilege Use: Success, Failure\n\nDetailed Tracking:\n  - Audit Process Creation: Success\n  - Audit DPAPI Activity: Success, Failure\n```\n\n### Step 2: Enable Command Line in Process Creation Events\n\n```powershell\n# Registry: Enable command line logging in Event 4688\nNew-ItemProperty -Path \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Audit\" `\n  -Name ProcessCreationIncludeCmdLine_Enabled -Value 1 -PropertyType DWORD -Force\n\n# GPO: Computer Configuration → Administrative Templates → System → Audit Process Creation\n# \"Include command line in process creation events\" → Enabled\n```\n\n### Step 3: Configure Event Log Sizes\n\n```powershell\n# Increase Security log to 1 GB (default 20 MB is insufficient)\nwevtutil sl Security \u002Fms:1073741824\n\n# Increase PowerShell Operational log\nwevtutil sl \"Microsoft-Windows-PowerShell\u002FOperational\" \u002Fms:536870912\n\n# Set log retention to overwrite as needed\nwevtutil sl Security \u002Frt:false\n\n# Configure via GPO:\n# Computer Configuration → Administrative Templates → Windows Components\n#   → Event Log Service → Security\n# Maximum log file size (KB): 1048576\n```\n\n### Step 4: Configure Windows Event Forwarding (WEF)\n\n```powershell\n# On collector server:\nwecutil qc \u002Fq\n\n# Create subscription for high-value events:\n# Event IDs: 4624 (logon), 4625 (failed logon), 4688 (process create),\n# 4672 (special privilege), 4720 (user created), 4728 (group membership),\n# 7045 (service installed), 1102 (log cleared)\n\n# On source endpoints (GPO):\n# Configure WinRM: winrm quickconfig\n# Configure event forwarding: Computer Configuration → Admin Templates\n#   → Windows Components → Event Forwarding\n# Configure target Subscription Manager: Server=http:\u002F\u002Fcollector:5985\u002Fwsman\u002FSubscriptionManager\u002FWEC\n```\n\n### Step 5: Key Event IDs for Detection\n\n```\nAuthentication Events:\n  4624 - Successful logon (Type 2=Interactive, 3=Network, 10=RemoteInteractive)\n  4625 - Failed logon attempt\n  4648 - Logon using explicit credentials (RunAs, pass-the-hash indicator)\n  4672 - Special privileges assigned (admin logon)\n  4776 - NTLM credential validation\n\nProcess Events:\n  4688 - Process creation (with command line if enabled)\n  4689 - Process termination\n\nAccount Events:\n  4720 - User account created\n  4722 - User account enabled\n  4724 - Password reset attempted\n  4728 - Member added to security group\n  4732 - Member added to local group\n  4756 - Member added to universal group\n\nService\u002FSystem Events:\n  7045 - New service installed (persistence indicator)\n  1102 - Audit log cleared (evidence tampering)\n  4697 - Service installed in the system\n\nLateral Movement Indicators:\n  4648 + 4624(Type 3) - Credential-based lateral movement\n  5140 - Network share accessed\n  5145 - Network share access check (detailed file share)\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|-----------|\n| **Advanced Audit Policy** | Granular audit subcategories (58 subcategories vs. 9 basic categories) |\n| **Event ID 4688** | Process creation event; essential for tracking execution on endpoints |\n| **WEF** | Windows Event Forwarding; centralized log collection without third-party agents |\n| **Logon Type** | Numeric code indicating authentication method (2=interactive, 3=network, 10=RDP) |\n\n## Tools & Systems\n\n- **Windows Event Forwarding (WEF)**: Built-in centralized log collection\n- **NXLog**: Open-source log forwarding agent for Windows events\n- **Winlogbeat**: Elastic Agent for shipping Windows event logs to Elasticsearch\n- **Palantir WEF Configuration**: Open-source WEF subscription templates\n\n## Common Pitfalls\n\n- **Using basic audit policy instead of advanced**: Basic and advanced audit policies conflict. Always use advanced audit policy exclusively.\n- **Default log size too small**: 20 MB Security log fills in minutes on busy servers. Set minimum 1 GB.\n- **Missing command line logging**: Event 4688 without command line content has minimal detection value. Always enable ProcessCreationIncludeCmdLine_Enabled.\n- **Not forwarding logs**: Local event logs are lost when endpoints are wiped by ransomware. Forward to centralized SIEM immediately.\n",{"name":5,"tags":44,"author":46,"domain":38,"license":15,"version":47,"subdomain":36,"description":48},[45,34,33,32,35],"endpoint","mahipal","1.0.0","Configures Windows Event Logging with advanced audit policies to generate high-fidelity security events for threat detection and forensic investigation. Use when enabling audit policies for logon events, process creation, privilege use, and object access to feed SIEM detection rules. Activates for requests involving Windows audit policy, event log configuration, security logging, or detection-oriented logging.\n","main","4d2fb89cdfb75f3f6fd3c6c5ec9ad90ea129eb3c","ai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection",2,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai","https:\u002F\u002Fgithub.com\u002Fluokai0","a solo builder.","2026-05-06 04:29:04",{"source":8,"skillName":5,"commands":58,"prompt":68,"zipAvailable":69},[59,62,65],{"tool":60,"command":61},"npx","npx skills add luokai0\u002Fai-agent-skills-by-luo-kai --skill configuring-windows-event-logging-for-detection",{"tool":63,"command":64},"bunx","bunx skills add luokai0\u002Fai-agent-skills-by-luo-kai --skill configuring-windows-event-logging-for-detection",{"tool":66,"command":67},"pnpm","pnpm dlx skills add luokai0\u002Fai-agent-skills-by-luo-kai --skill configuring-windows-event-logging-for-detection","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002FSKILL.md",true,[71,77,82,88,92,96,102],{"path":72,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":75,"sourceHtmlUrl":76},"assets\u002Ftemplate.md","ASSET","资产文件",508,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002Fassets\u002Ftemplate.md",{"path":78,"resourceType":78,"resourceTypeDesc":79,"sizeBytes":80,"sourceHtmlUrl":81},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002FLICENSE",{"path":83,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":86,"sourceHtmlUrl":87},"references\u002Fapi-reference.md","REFERENCE","参考文档",1567,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002Freferences\u002Fapi-reference.md",{"path":89,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":90,"sourceHtmlUrl":91},"references\u002Fstandards.md",391,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002Freferences\u002Fstandards.md",{"path":93,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":94,"sourceHtmlUrl":95},"references\u002Fworkflows.md",349,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002Freferences\u002Fworkflows.md",{"path":97,"resourceType":98,"resourceTypeDesc":99,"sizeBytes":100,"sourceHtmlUrl":101},"scripts\u002Fagent.py","SCRIPT","脚本",5816,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002Fscripts\u002Fagent.py",{"path":103,"resourceType":98,"resourceTypeDesc":99,"sizeBytes":104,"sourceHtmlUrl":105},"scripts\u002Fprocess.py",2043,"https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F21-external-registries\u002F08-pinkpixel-collection\u002Fconfiguring-windows-event-logging-for-detection\u002Fscripts\u002Fprocess.py",[107,135,152,182,213,250],{"skillNo":108,"name":109,"nameZh":6,"description":110,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":111,"licenseFileUrl":6,"sourceHtmlUrl":112,"categories":113,"keywords":114,"publishedAt":39},"01M6F2SKTE208174C7S7JJCZC7","write-contracts","Generates secure Aptos Move V2 smart contracts with Object model, Digital Asset integration, security patterns, and storage type guidance. Includes comprehensive storage decision framework for optimal data structure selection. Triggers on: 'write contract', 'create NFT collection', 'build marketplace', 'implement minting', 'generate Move module', 'create token contract', 'build DAO', 'implement staking'. Ask storage questions when: 'store', 'track', 'registry', 'mapping', 'list', 'collection'.","MIT","https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F22-clawhub-skills\u002Fwrite-contracts\u002FSKILL.md",[],[115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134],"write","contracts","write contracts","storage","secure","create","generate","collection","model","decision","ask","smart-contracts","selection","objects","structure","nft","token","aptos","critical","move",{"skillNo":136,"name":137,"nameZh":6,"description":138,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":111,"licenseFileUrl":6,"sourceHtmlUrl":139,"categories":140,"keywords":141,"publishedAt":39},"01M6F2RFXJ6T9MKW0A7N7GM45B","web-search","通用网络搜索技能，支持多引擎搜索（百度、必应、DuckDuckGo），无需API密钥即可获取实时信息","https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F22-clawhub-skills\u002Fweb-search-ex-skill\u002FSKILL.md",[],[142,143,144,145,146,147,148,149,150,151],"web","search","web search","搜索","baidu","bing","duckduckgo","百度","多引擎","internet",{"skillNo":153,"name":154,"nameZh":6,"description":155,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":111,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":163,"publishedAt":39},"01M6F2K968G1FZEZFPW2E6B222","solo-build","Execute implementation plan tasks with TDD workflow, auto-commit, and phase gates. Use when user says \"build it\", \"start building\", \"execute plan\", \"implement tasks\", \"ship it\", or references a track ID. Do NOT use for planning (use \u002Fplan) or scaffolding (use \u002Fscaffold).","https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F22-clawhub-skills\u002Fsolo-build\u002FSKILL.md",[158],{"categoryNo":159,"categoryName":160,"taxonomyType":161,"taxonomyTypeDesc":162},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[164,165,166,167,168,169,170,171,143,172,173,174,115,175,176,177,178,179,180,181],"build","solo","solo build","MCP","workflow","commit","tasks","code","Bash","plan","read","auto","references","context7","query","scaffolding","ship it","project",{"skillNo":183,"name":184,"nameZh":6,"description":185,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":111,"licenseFileUrl":6,"sourceHtmlUrl":186,"categories":187,"keywords":194,"publishedAt":39},"01M6F2GKN39SGHSPWYB3662YC8","react-email","Use when building HTML email templates with React components, adding a visual email editor to an application using the React Email visual editor, rendering emails to HTML, or sending emails with Resend. Covers welcome emails, password resets, notifications, order confirmations, newsletters, transactional emails, and the embeddable email editor component.","https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F22-clawhub-skills\u002Freact-email-skills\u002FSKILL.md",[188,191],{"categoryNo":189,"categoryName":190,"taxonomyType":161,"taxonomyTypeDesc":162},"01JBSEEDCAT000000000000005","邮件与沟通",{"categoryNo":192,"categoryName":193,"taxonomyType":161,"taxonomyTypeDesc":162},"01JBSEEDCAT000000000000009","前端开发",[195,196,197,198,199,200,201,202,203,204,205,206,207,29,208,209,210,211,212,26],"react","email","react email","github","editor","components","react components","component","welcome","https","notifications","password","node","html","resend","visual","emails","rendering",{"skillNo":214,"name":215,"nameZh":6,"description":216,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":111,"licenseFileUrl":6,"sourceHtmlUrl":217,"categories":218,"keywords":231,"publishedAt":39},"01M6F2FBVGVDFSG8SSFJGXA40C","APITester Agent-Driven API Testing","Test API endpoints and document responses. Define tests in plain English, run them, get formatted results. Agent-driven Postman alternative.","https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F22-clawhub-skills\u002Fopenclaw-api-tester\u002FSKILL.md",[219,222,225,226],{"categoryNo":220,"categoryName":221,"taxonomyType":161,"taxonomyTypeDesc":162},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":223,"categoryName":224,"taxonomyType":161,"taxonomyTypeDesc":162},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":159,"categoryName":160,"taxonomyType":161,"taxonomyTypeDesc":162},{"categoryNo":227,"categoryName":228,"taxonomyType":229,"taxonomyTypeDesc":230},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249],"testing","api","api testing","driven","APITester Agent Driven API Testing","test","run","postman","results","plain english","tester","endpoints","document","get","define","tests","english","api-tester",{"skillNo":251,"name":252,"nameZh":6,"description":253,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":111,"licenseFileUrl":6,"sourceHtmlUrl":254,"categories":255,"keywords":256,"publishedAt":39},"01M6F273Y3NGAPVJZ608BC0G9G","hubspot-implementation-plan","Generate a phased implementation plan from a HubSpot audit report. Creates prioritized, sequenced cleanup processes with effort estimates, dependencies, and automation feasibility. Use after running \u002Fhubspot-audit.","https:\u002F\u002Fgithub.com\u002Fluokai0\u002Fai-agent-skills-by-luo-kai\u002Fblob\u002Fmain\u002Fai-agent-skills\u002F22-clawhub-skills\u002Fhubspot-implementation-plan\u002FSKILL.md",[],[173,257,258,259,260,261,262,121,263,264,265,266,267,29,268,269,26,270],"implementation","hubspot","hubspot implementation plan","automation","feasibility","cleanup","planning","report","audit","audit report","phased implementation","dependencies","processes","hubspot audit"]