[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6GYNV3FS6SEY26BY1ZFBWVC":3,"skill-same:01M6GYNV3FS6SEY26BY1ZFBWVC":87},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":6,"ownerHtmlUrl":54,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":55,"install":56,"resources":69},"01M6GYNV3FS6SEY26BY1ZFBWVC","implementing-privileged-session-monitoring",null,"Monitor and audit privileged user sessions including SSH, RDP, and database access. Tracks session metadata, records commands, detects anomalous activity, and enforces session policies for PAM compliance.","micsapp\u002Fmicstec-skills","micsapp","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F82411001?v=4","01M6GWCFQ6D3PV8EHNY62NN5VW","01M6GWCFVE1PA5HG0DKC7AMFJ3",4,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-privileged-session-monitoring\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37],"implementing","monitoring","session","implementing privileged session monitoring","audit-logging","for","tracks","records","access","ssh","session-monitoring","cybersecurity","privileged-access","PAM","rdp","compliance","audit","database","monitor","sessions","2026-11-10 10:12:30",false,"---\nname: implementing-privileged-session-monitoring\ndescription: >\n  Monitor and audit privileged user sessions including SSH, RDP, and\n  database access. Tracks session metadata, records commands, detects\n  anomalous activity, and enforces session policies for PAM compliance.\ndomain: cybersecurity\nsubdomain: identity-access-management\ntags: [pam, session-monitoring, privileged-access, audit-logging]\nversion: \"1.0\"\nauthor: mahipal\nlicense: Apache-2.0\n---\n\n# Implementing Privileged Session Monitoring\n\n## When to Use\n\n- Deploying session recording for all privileged access to critical servers and databases\n- Meeting compliance requirements (PCI-DSS 10.2, SOX, HIPAA, ISO 27001) mandating privileged activity monitoring\n- Investigating incidents where an administrator may have performed unauthorized actions\n- Implementing real-time alerting for high-risk commands during privileged sessions\n- Establishing a forensic audit trail of all administrative actions on production infrastructure\n\n**Do not use** for monitoring standard user sessions; use EDR\u002FUBA for general user behavior monitoring.\n\n## Prerequisites\n\n- CyberArk PAM or Privilege Cloud with Digital Vault, or open-source alternative (Teleport)\n- PSM (Privileged Session Manager) or PSMP installed on hardened jump server\n- Network architecture routing all privileged access through the PSM proxy\n- Sufficient storage for recordings (estimate: 50-250 KB\u002Fmin for RDP, 5-20 KB\u002Fmin for SSH)\n\n## Workflow\n\n### Step 1: Route All Privileged Access Through PSM\n\n```\nArchitecture:\n  Admin User --> PVWA (Web Portal) --> PSM (Jump Server) --> Target Server\n\nNetwork Controls:\n  - DENY direct RDP (3389) \u002F SSH (22) to targets from user networks\n  - ALLOW RDP\u002FSSH to targets ONLY from PSM server IPs\n  - ALLOW PVWA access (443) from admin user networks\n```\n\n### Step 2: Configure PSM Connection Components\n\n```\nPVWA > Administration > Connection Components\n\nFor Windows RDP:\n  Connection Component: PSM-RDP\n  Record Sessions: Yes\n  Recording Format: AVI (video) + Keystrokes (text)\n  Record Windows Titles: Yes\n\nFor Linux SSH:\n  Connection Component: PSM-SSH\n  Record Sessions: Yes\n  Record Unix Commands: Yes\n```\n\n### Step 3: Configure Session Recording Policies\n\n```\nPVWA > Platform Management > Session Management\n\n  Enable Session Recording: Yes\n  Keystroke Logging: Enable Transcript + Window Events\n  Storage: Vault (encrypted, tamper-proof)\n\n  Retention periods (per compliance):\n    PCI-DSS:  1 year available, 3 months accessible\n    SOX:      7 years\n    HIPAA:    6 years\n\n  Per-Safe policies:\n    Production-Servers-Admin: Record all, real-time monitoring\n    Third-Party-Vendor-Access: Record all, dual authorization required\n```\n\n### Step 4: Enable Real-Time Monitoring and Alerting\n\nConfigure CyberArk Privileged Threat Analytics (PTA):\n\n```\nPTA > Configuration > Security Events\n\nRule: High-Risk Command Detected\n  Trigger patterns:\n    - rm -rf \u002F\n    - chmod 777\n    - useradd \u002F passwd root\n    - wget http* | sh \u002F curl * | bash\n    - nc -e \u002Fbin\u002Fsh\n  Action: Alert SOC + Flag session as high-risk\n\nRule: Credential Access Attempt\n  Trigger:\n    - mimikatz.exe\n    - procdump.exe targeting lsass\n    - ntdsutil.exe\n  Action: Terminate session + Alert SOC + Lock account\n\nRule: Unusual Session Duration\n  Trigger: Session > 4 hours\n  Action: Alert SOC for review\n```\n\n### Step 5: Configure Session Review Workflow\n\n```\nPVWA > Recordings > Search and Review\n\nReview features:\n  - Video playback with timeline scrubbing\n  - Keystroke transcript alongside video\n  - Window title log for application tracking\n  - Risk events highlighted on timeline\n  - Text search within keystroke transcript\n  - Auditor can mark: Reviewed-OK, Suspicious, Requires-Investigation\n```\n\n### Step 6: Open-Source Alternative - Teleport\n\n```yaml\n# \u002Fetc\u002Fteleport.yaml\nteleport:\n  nodename: teleport-proxy.corp.internal\n\nauth_service:\n  enabled: yes\n  session_recording: \"node-sync\"\n  audit_sessions_uri: \"s3:\u002F\u002Fteleport-session-recordings\u002Fsessions?region=us-east-1\"\n  enhanced_recording:\n    enabled: true\n    command_events: true\n    network_events: true\n```\n\n```bash\n# List recorded sessions\ntsh recordings ls --from=2026-03-15\n\n# Play back a session\ntsh play \u003Csession-id>\n\n# Export session events for SIEM\ntsh recordings export \u003Csession-id> --format=json > session_events.json\n```\n\n### Step 7: Forward Session Metadata to SIEM\n\n```\nCyberArk PTA > SIEM Integration\n  Protocol: TCP + TLS (Syslog CEF)\n  Destination: siem.corp.internal:6514\n\nEvents forwarded:\n  - Session start\u002Fstop with user, target, duration\n  - High-risk command alerts\n  - Session termination events\n  - Dual-authorization approvals\u002Fdenials\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|------------|\n| **PSM** | Privileged Session Manager - proxy recording all sessions in video and text |\n| **PSMP** | PSM for SSH Proxy - Linux-based proxy for SSH, SCP, SFTP sessions |\n| **PTA** | Privileged Threat Analytics - behavioral analytics and risk scoring for sessions |\n| **Dual Authorization** | Two authorized users must approve before a privileged session is established |\n| **Session Isolation** | All admin access proxied through PAM; no direct connections to targets |\n| **Keystroke Transcript** | Searchable text log of all keystrokes during a recorded session |\n\n## Verification\n\n- [ ] All privileged access routes through PSM (direct RDP\u002FSSH blocked by firewall)\n- [ ] Session recordings stored encrypted with tamper protection\n- [ ] Keystroke transcripts captured and searchable for SSH and RDP\n- [ ] PTA rules trigger alerts for high-risk commands (test with benign trigger)\n- [ ] Real-time monitoring dashboard shows active sessions with correct metadata\n- [ ] Recordings play back in PVWA HTML5 player with timeline and transcript\n- [ ] Retention policies match compliance requirements\n- [ ] Dual authorization enforced for vendor and high-risk access\n- [ ] Session metadata and alerts forwarding to SIEM\n","# Implementing Privileged Session Monitoring\n\n## When to Use\n\n- Deploying session recording for all privileged access to critical servers and databases\n- Meeting compliance requirements (PCI-DSS 10.2, SOX, HIPAA, ISO 27001) mandating privileged activity monitoring\n- Investigating incidents where an administrator may have performed unauthorized actions\n- Implementing real-time alerting for high-risk commands during privileged sessions\n- Establishing a forensic audit trail of all administrative actions on production infrastructure\n\n**Do not use** for monitoring standard user sessions; use EDR\u002FUBA for general user behavior monitoring.\n\n## Prerequisites\n\n- CyberArk PAM or Privilege Cloud with Digital Vault, or open-source alternative (Teleport)\n- PSM (Privileged Session Manager) or PSMP installed on hardened jump server\n- Network architecture routing all privileged access through the PSM proxy\n- Sufficient storage for recordings (estimate: 50-250 KB\u002Fmin for RDP, 5-20 KB\u002Fmin for SSH)\n\n## Workflow\n\n### Step 1: Route All Privileged Access Through PSM\n\n```\nArchitecture:\n  Admin User --> PVWA (Web Portal) --> PSM (Jump Server) --> Target Server\n\nNetwork Controls:\n  - DENY direct RDP (3389) \u002F SSH (22) to targets from user networks\n  - ALLOW RDP\u002FSSH to targets ONLY from PSM server IPs\n  - ALLOW PVWA access (443) from admin user networks\n```\n\n### Step 2: Configure PSM Connection Components\n\n```\nPVWA > Administration > Connection Components\n\nFor Windows RDP:\n  Connection Component: PSM-RDP\n  Record Sessions: Yes\n  Recording Format: AVI (video) + Keystrokes (text)\n  Record Windows Titles: Yes\n\nFor Linux SSH:\n  Connection Component: PSM-SSH\n  Record Sessions: Yes\n  Record Unix Commands: Yes\n```\n\n### Step 3: Configure Session Recording Policies\n\n```\nPVWA > Platform Management > Session Management\n\n  Enable Session Recording: Yes\n  Keystroke Logging: Enable Transcript + Window Events\n  Storage: Vault (encrypted, tamper-proof)\n\n  Retention periods (per compliance):\n    PCI-DSS:  1 year available, 3 months accessible\n    SOX:      7 years\n    HIPAA:    6 years\n\n  Per-Safe policies:\n    Production-Servers-Admin: Record all, real-time monitoring\n    Third-Party-Vendor-Access: Record all, dual authorization required\n```\n\n### Step 4: Enable Real-Time Monitoring and Alerting\n\nConfigure CyberArk Privileged Threat Analytics (PTA):\n\n```\nPTA > Configuration > Security Events\n\nRule: High-Risk Command Detected\n  Trigger patterns:\n    - rm -rf \u002F\n    - chmod 777\n    - useradd \u002F passwd root\n    - wget http* | sh \u002F curl * | bash\n    - nc -e \u002Fbin\u002Fsh\n  Action: Alert SOC + Flag session as high-risk\n\nRule: Credential Access Attempt\n  Trigger:\n    - mimikatz.exe\n    - procdump.exe targeting lsass\n    - ntdsutil.exe\n  Action: Terminate session + Alert SOC + Lock account\n\nRule: Unusual Session Duration\n  Trigger: Session > 4 hours\n  Action: Alert SOC for review\n```\n\n### Step 5: Configure Session Review Workflow\n\n```\nPVWA > Recordings > Search and Review\n\nReview features:\n  - Video playback with timeline scrubbing\n  - Keystroke transcript alongside video\n  - Window title log for application tracking\n  - Risk events highlighted on timeline\n  - Text search within keystroke transcript\n  - Auditor can mark: Reviewed-OK, Suspicious, Requires-Investigation\n```\n\n### Step 6: Open-Source Alternative - Teleport\n\n```yaml\n# \u002Fetc\u002Fteleport.yaml\nteleport:\n  nodename: teleport-proxy.corp.internal\n\nauth_service:\n  enabled: yes\n  session_recording: \"node-sync\"\n  audit_sessions_uri: \"s3:\u002F\u002Fteleport-session-recordings\u002Fsessions?region=us-east-1\"\n  enhanced_recording:\n    enabled: true\n    command_events: true\n    network_events: true\n```\n\n```bash\n# List recorded sessions\ntsh recordings ls --from=2026-03-15\n\n# Play back a session\ntsh play \u003Csession-id>\n\n# Export session events for SIEM\ntsh recordings export \u003Csession-id> --format=json > session_events.json\n```\n\n### Step 7: Forward Session Metadata to SIEM\n\n```\nCyberArk PTA > SIEM Integration\n  Protocol: TCP + TLS (Syslog CEF)\n  Destination: siem.corp.internal:6514\n\nEvents forwarded:\n  - Session start\u002Fstop with user, target, duration\n  - High-risk command alerts\n  - Session termination events\n  - Dual-authorization approvals\u002Fdenials\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|------------|\n| **PSM** | Privileged Session Manager - proxy recording all sessions in video and text |\n| **PSMP** | PSM for SSH Proxy - Linux-based proxy for SSH, SCP, SFTP sessions |\n| **PTA** | Privileged Threat Analytics - behavioral analytics and risk scoring for sessions |\n| **Dual Authorization** | Two authorized users must approve before a privileged session is established |\n| **Session Isolation** | All admin access proxied through PAM; no direct connections to targets |\n| **Keystroke Transcript** | Searchable text log of all keystrokes during a recorded session |\n\n## Verification\n\n- [ ] All privileged access routes through PSM (direct RDP\u002FSSH blocked by firewall)\n- [ ] Session recordings stored encrypted with tamper protection\n- [ ] Keystroke transcripts captured and searchable for SSH and RDP\n- [ ] PTA rules trigger alerts for high-risk commands (test with benign trigger)\n- [ ] Real-time monitoring dashboard shows active sessions with correct metadata\n- [ ] Recordings play back in PVWA HTML5 player with timeline and transcript\n- [ ] Retention policies match compliance requirements\n- [ ] Dual authorization enforced for vendor and high-risk access\n- [ ] Session metadata and alerts forwarding to SIEM\n",{"name":5,"tags":43,"author":45,"domain":29,"license":14,"version":46,"subdomain":47,"description":48},[44,28,30,22],"pam","mahipal","1.0","identity-access-management","Monitor and audit privileged user sessions including SSH, RDP, and database access. Tracks session metadata, records commands, detects anomalous activity, and enforces session policies for PAM compliance.\n","master","3f5d983eb4ef375b749adcd6b07ec03bd82ae8a8","_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-privileged-session-monitoring",0,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills","https:\u002F\u002Fgithub.com\u002Fmicsapp","2026-03-20 11:24:18",{"source":8,"skillName":5,"commands":57,"prompt":67,"zipAvailable":68},[58,61,64],{"tool":59,"command":60},"npx","npx skills add micsapp\u002Fmicstec-skills --skill implementing-privileged-session-monitoring",{"tool":62,"command":63},"bunx","bunx skills add micsapp\u002Fmicstec-skills --skill implementing-privileged-session-monitoring",{"tool":65,"command":66},"pnpm","pnpm dlx skills add micsapp\u002Fmicstec-skills --skill implementing-privileged-session-monitoring","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-privileged-session-monitoring\u002FSKILL.md",true,[70,75,81],{"path":71,"resourceType":71,"resourceTypeDesc":72,"sizeBytes":73,"sourceHtmlUrl":74},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-privileged-session-monitoring\u002FLICENSE",{"path":76,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":79,"sourceHtmlUrl":80},"references\u002Fapi-reference.md","REFERENCE","参考文档",2069,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-privileged-session-monitoring\u002Freferences\u002Fapi-reference.md",{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"scripts\u002Fagent.py","SCRIPT","脚本",8215,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-privileged-session-monitoring\u002Fscripts\u002Fagent.py",[88,125,154,174,194,219],{"skillNo":89,"name":90,"nameZh":6,"description":91,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":92,"licenseFileUrl":6,"sourceHtmlUrl":93,"categories":94,"keywords":105,"publishedAt":38},"01M6HBTJ02FXBFG9NYEHHYAP52","azure-apim-architecture","Analyzes and explains Azure API Management architecture decisions for enterprise API marketplace implementations using VNet Internal mode, Front Door, hybrid authentication, and multi-environment strategies. Use when discussing APIM component selection, network topology, cost optimization, or comparing alternatives like workspaces vs instances, VNet Internal vs External mode, or Front Door vs Application Gateway.","MIT","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fazure-apim-architecture\u002FSKILL.md",[95,100],{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,23],"architecture","azure","azure apim architecture","component","authentication","gateway","topology","Optimization","network","api","team","environment","multi-environment","workspaces","instances","selection","strategies","azure api management","mode",{"skillNo":126,"name":127,"nameZh":6,"description":128,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":92,"licenseFileUrl":6,"sourceHtmlUrl":129,"categories":130,"keywords":139,"publishedAt":38},"01M6HBT7J4H082JEEA670B3EQ9","apiops-deployment","Guides deployment of Azure API Management infrastructure using Infrastructure as Code (Bicep\u002FTerraform), CI\u002FCD pipelines (GitHub Actions\u002FAzure DevOps), and APIOps workflows. Use when deploying APIM, creating pipelines, or implementing dev→test→prod promotion strategies.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapiops-deployment\u002FSKILL.md",[131,132,135,138],{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},{"categoryNo":133,"categoryName":134,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":136,"categoryName":137,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},[140,141,142,143,107,144,145,146,147,148,149,150,115,116,122,151,152,123,153,18],"deployment","apiops deployment","workflows","azure devops","infrastructure","code","infrastructure as code","actions","ci","github actions","github-actions","as","guides","CI\u002FCD",{"skillNo":155,"name":156,"nameZh":6,"description":157,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":92,"licenseFileUrl":6,"sourceHtmlUrl":158,"categories":159,"keywords":161,"publishedAt":38},"01M6HBT2HEA23THNE9E00GYQBE","apim-policy-authoring","Creates production-ready Azure API Management policy XML for authentication (OAuth 2.0, JWT validation, subscription keys), rate limiting, CORS configuration, error handling, and API transformations. Use when implementing API security, access control, or request\u002Fresponse processing logic.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapim-policy-authoring\u002FSKILL.md",[160],{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},[162,163,164,165,107,110,115,116,26,166,167,168,169,170,171,123,172,173,18,23],"policy","authoring","apim policy authoring","security","use","ready","api security","Access Control","error","processing","cors configuration","production-ready",{"skillNo":175,"name":176,"nameZh":6,"description":177,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":92,"licenseFileUrl":6,"sourceHtmlUrl":178,"categories":179,"keywords":182,"publishedAt":38},"01M6HBSY65SB29J9WE9KYD0K6T","api-security-review","Reviews Azure API Management configurations for security vulnerabilities, OWASP API Security Top 10 compliance, VNet Internal mode validation, Private Link verification, and Azure Security Benchmark alignment. Use when performing security audits, pre-deployment validation, or compliance reviews.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapi-security-review\u002FSKILL.md",[180,181],{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},[183,165,184,115,168,185,107,140,186,187,188,189,116,190,123,191,192,193,124,23],"review","security review","api security review","benchmark","verification","owasp","owasp-api","alignment","azure security","reviews","top",{"skillNo":195,"name":196,"nameZh":6,"description":197,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":92,"licenseFileUrl":6,"sourceHtmlUrl":198,"categories":199,"keywords":200,"publishedAt":38},"01M6HBSRW4PDFE6K4F8JYPZQ05","jira-cli","Interact with Jira from the command line to create, list, view, edit, and transition issues, manage sprints and epics, and perform common Jira workflows. Use when the user asks about Jira tasks, tickets, issues, sprints, or needs to manage project work items.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fjira-cli\u002FSKILL.md",[],[201,202,203,142,204,205,206,207,115,208,209,210,211,212,213,214,215,216,217,218],"cli","jira","jira cli","init","tasks","create","issues","common","work","command","edit","list","view","project","project work","token","line","sprints",{"skillNo":220,"name":221,"nameZh":6,"description":222,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":92,"licenseFileUrl":6,"sourceHtmlUrl":223,"categories":224,"keywords":225,"publishedAt":38},"01M6HBSNS3JHMW603G47TWE31H","calculator","Performs arbitrary-precision arithmetic calculations including addition, subtraction, multiplication, division, and exponents. Use when the user asks to calculate, compute, or evaluate math expressions, or when precise decimal arithmetic is needed to avoid floating-point errors.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fcalculator\u002FSKILL.md",[],[221,226,227,228,229,230,231,166,232,233],"npm","js","calculate","node","math","user","compute","errors"]