[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6PBAW7V601YKKNFADKVB3RY":3,"skill-same:01M6PBAW7V601YKKNFADKVB3RY":73},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":22,"commitSha":48,"skillDirectory":49,"forksCount":13,"repositoryHtmlUrl":50,"repositoryHomepageUrl":6,"ownerHtmlUrl":51,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":52,"install":53,"resources":66},"01M6PBAW7V601YKKNFADKVB3RY","ot-ics",null,"Authorized OT\u002FICS security assessment: Purdue-model zoning review, PLC\u002FSCADA exposure, industrial protocol discovery, and passive-first evaluation discipline.","duc-duy-1612\u002FOnline-Delivery-Systems-Web","duc-duy-1612","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F192231384?v=4","01M6NSDKQQDKVTHZ8DZMZ1VYY6","01M6NSDKW8DDVTQHBT1HBDDJPT",0,"MIT","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fot-ics\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37],"ot ics","ics","purdue-model","reverse","main","community","security assessment","plc","discipline","model","discovery","review","first","scada","Evaluation","https","license","protocol","assessment","github","2026-11-10 10:12:30",false,"---\nname: ot-ics\ndescription: \"Authorized OT\u002FICS security assessment: Purdue-model zoning review, PLC\u002FSCADA exposure, industrial protocol discovery, and passive-first evaluation discipline.\"\nrisk: offensive\nsource: \"https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill\"\nsource_repo: \"zhaoxuya520\u002Freverse-skill\"\nsource_type: community\ndate_added: \"2026-08-25\"\nlicense: \"MIT\"\nlicense_source: \"https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill\u002Fblob\u002Fmain\u002FLICENSE\"\n---\n> **⚠️ AUTHORIZED USE ONLY**\n> This skill is for educational purposes or authorized security assessments only.\n> You must have explicit, written permission from the system owner before using this tool.\n> Misuse of this tool is illegal and strictly prohibited.\n\n> **Mandatory confirmation gate**\n> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:\n> 1. Ask the user to state the exact target URL, IP, account, or resource.\n> 2. Ask the user to confirm written authorization and the permitted scope.\n> 3. Show the exact command(s) and explain their expected effect.\n> 4. Wait for explicit confirmation in the current conversation.\n>\n> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.\n\n# OT \u002F ICS Security\n## When to Use\n\n- Passive assessment of industrial networks within an approved scope.\n- Documenting PLC\u002FSCADA exposure and zoning violations.\n\n\n## 适用场景\n\n- 工控\u002FSCADA\u002FDCS 安全评估（授权）\n- Purdue 模型分区与跨区通道\n- Modbus\u002FDNP3\u002FS7\u002FEtherNet\u002FIP 等协议暴露\n- 工程师站、HMI、历史库、跳板主机\n- IT\u002FOT 融合边界（防火墙规则、单向闸）\n\n## 安全铁律（MUST）\n\n```text\nMUST NOT 在未明确允许时：\n- 对 PLC 写线圈\u002F寄存器\n- 全网高速率扫描生产 OT\n- 中断安全仪表系统（SIS）相关路径\n优先：只读识别、流量镜像、离线固件\u002F配置分析\n```\n\n## 工作流\n\n### Phase 1 — 分区与资产\n\n```text\n□ Purdue L0–L5 草图：现场设备 → 控制 → 监督 → 站点 DMZ → 企业\n□ 资产清单：PLC\u002FRTU\u002FHMI\u002F工程师站\u002F历史库\u002FJump host\n□ 协议与端口基线（仅授权网段）\n```\n\n### Phase 2 — 被动与只读\n\n```text\n□ SPAN\u002F镜像 PCAP → protocol-reverse \u002F Wireshark 工控解析器\n□ 配置与工程文件离线审计（TIA\u002FRSLogix 导出等）\n□ 默认口令与明文协议（Modbus 无认证）记录为 Finding，不写盘改值\n```\n\n### Phase 3 — 受限主动（仅授权）\n\n```text\n□ 低速识别，维护窗口\n□ 只读功能码优先\n□ 每步 Evidence；异常立即停止并通报\n```\n\n### Phase 4 — 固件\u002F补丁面\n\n```text\n□ 控制器固件版本 → CVE 映射（不盲刷固件）\n□ 联合 firmware-pentest 做离线镜像分析\n```\n\n## 工具链\n\n| 工具 | 用途 | 注意 |\n|------|------|------|\n| Wireshark 工控 dissectors | 被动解析 | 镜像流量 |\n| Nmap NSE（受限） | 识别 | 速率与时间窗 |\n| Claroty\u002FNozomi 等 | 资产发现 | 商业\u002F现场 |\n| PLC 厂商工程软件 | 配置审计 | 离线优先 |\n| binwalk \u002F Ghidra | 固件 | 离线 |\n\n## 参考\n\n- `references\u002Fot-safe-assessment.md`\n- `..\u002Ffirmware-pentest\u002F` `..\u002Fprotocol-reverse\u002F` `..\u002Fnetwork` via pentest-tools\n\n## 路由上下文\n\n**上游**: MASTER R28  \n**下游**: 固件深挖 `firmware-pentest`；协议 `protocol-reverse`；IT 横向 `windows-ad`\u002F`attack-chain`  \n**同级**: 不要用普通 Web 扫默认参数打 OT\n\n## 任务完成自检\n\n- [ ] 是否默认被动\u002F只读并记录授权边界？\n- [ ] 是否避免对控制回路写操作（除非明确允许）？\n- [ ] Finding 是否含物理\u002F过程影响说明？\n- [ ] Checklist \u002F journal？\n\n## Limitations\n\n- Active scanning can crash PLCs; default to passive capture.\n- Specialized protocols need vendor documentation rarely available publicly.\n\n> Adapted from [zhaoxuya520\u002Freverse-skill](https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill) (MIT).\n","> **⚠️ AUTHORIZED USE ONLY**\n> This skill is for educational purposes or authorized security assessments only.\n> You must have explicit, written permission from the system owner before using this tool.\n> Misuse of this tool is illegal and strictly prohibited.\n\n> **Mandatory confirmation gate**\n> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:\n> 1. Ask the user to state the exact target URL, IP, account, or resource.\n> 2. Ask the user to confirm written authorization and the permitted scope.\n> 3. Show the exact command(s) and explain their expected effect.\n> 4. Wait for explicit confirmation in the current conversation.\n>\n> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.\n\n# OT \u002F ICS Security\n## When to Use\n\n- Passive assessment of industrial networks within an approved scope.\n- Documenting PLC\u002FSCADA exposure and zoning violations.\n\n\n## 适用场景\n\n- 工控\u002FSCADA\u002FDCS 安全评估（授权）\n- Purdue 模型分区与跨区通道\n- Modbus\u002FDNP3\u002FS7\u002FEtherNet\u002FIP 等协议暴露\n- 工程师站、HMI、历史库、跳板主机\n- IT\u002FOT 融合边界（防火墙规则、单向闸）\n\n## 安全铁律（MUST）\n\n```text\nMUST NOT 在未明确允许时：\n- 对 PLC 写线圈\u002F寄存器\n- 全网高速率扫描生产 OT\n- 中断安全仪表系统（SIS）相关路径\n优先：只读识别、流量镜像、离线固件\u002F配置分析\n```\n\n## 工作流\n\n### Phase 1 — 分区与资产\n\n```text\n□ Purdue L0–L5 草图：现场设备 → 控制 → 监督 → 站点 DMZ → 企业\n□ 资产清单：PLC\u002FRTU\u002FHMI\u002F工程师站\u002F历史库\u002FJump host\n□ 协议与端口基线（仅授权网段）\n```\n\n### Phase 2 — 被动与只读\n\n```text\n□ SPAN\u002F镜像 PCAP → protocol-reverse \u002F Wireshark 工控解析器\n□ 配置与工程文件离线审计（TIA\u002FRSLogix 导出等）\n□ 默认口令与明文协议（Modbus 无认证）记录为 Finding，不写盘改值\n```\n\n### Phase 3 — 受限主动（仅授权）\n\n```text\n□ 低速识别，维护窗口\n□ 只读功能码优先\n□ 每步 Evidence；异常立即停止并通报\n```\n\n### Phase 4 — 固件\u002F补丁面\n\n```text\n□ 控制器固件版本 → CVE 映射（不盲刷固件）\n□ 联合 firmware-pentest 做离线镜像分析\n```\n\n## 工具链\n\n| 工具 | 用途 | 注意 |\n|------|------|------|\n| Wireshark 工控 dissectors | 被动解析 | 镜像流量 |\n| Nmap NSE（受限） | 识别 | 速率与时间窗 |\n| Claroty\u002FNozomi 等 | 资产发现 | 商业\u002F现场 |\n| PLC 厂商工程软件 | 配置审计 | 离线优先 |\n| binwalk \u002F Ghidra | 固件 | 离线 |\n\n## 参考\n\n- `references\u002Fot-safe-assessment.md`\n- `..\u002Ffirmware-pentest\u002F` `..\u002Fprotocol-reverse\u002F` `..\u002Fnetwork` via pentest-tools\n\n## 路由上下文\n\n**上游**: MASTER R28  \n**下游**: 固件深挖 `firmware-pentest`；协议 `protocol-reverse`；IT 横向 `windows-ad`\u002F`attack-chain`  \n**同级**: 不要用普通 Web 扫默认参数打 OT\n\n## 任务完成自检\n\n- [ ] 是否默认被动\u002F只读并记录授权边界？\n- [ ] 是否避免对控制回路写操作（除非明确允许）？\n- [ ] Finding 是否含物理\u002F过程影响说明？\n- [ ] Checklist \u002F journal？\n\n## Limitations\n\n- Active scanning can crash PLCs; default to passive capture.\n- Specialized protocols need vendor documentation rarely available publicly.\n\n> Adapted from [zhaoxuya520\u002Freverse-skill](https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill) (MIT).\n",{"name":5,"risk":43,"source":44,"license":14,"date_added":45,"description":7,"source_repo":46,"source_type":23,"license_source":47},"offensive","https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill","2026-08-25","zhaoxuya520\u002Freverse-skill","https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill\u002Fblob\u002Fmain\u002FLICENSE","f3312ba749561b6159f477dbfc9313c875d40a56",".agents\u002Fskills_archive\u002Fot-ics","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612","2026-10-25 23:50:58",{"source":8,"skillName":5,"commands":54,"prompt":64,"zipAvailable":65},[55,58,61],{"tool":56,"command":57},"npx","npx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill ot-ics",{"tool":59,"command":60},"bunx","bunx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill ot-ics",{"tool":62,"command":63},"pnpm","pnpm dlx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill ot-ics","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fot-ics\u002FSKILL.md",true,[67],{"path":68,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":71,"sourceHtmlUrl":72},"references\u002Fot-safe-assessment.md","REFERENCE","参考文档",411,"https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fot-ics\u002Freferences\u002Fot-safe-assessment.md",[74,102,124,146,174,198],{"skillNo":75,"name":76,"nameZh":6,"description":77,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":78,"categories":79,"keywords":85,"publishedAt":38},"01M6Q0FA5FZ410Z33Z3TFQ4DBA","zero-trust","Implement zero-trust network architecture. Configure identity-based access, micro-segmentation, and continuous verification. Use when implementing modern security architectures.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fzero-trust\u002FSKILL.md",[80],{"categoryNo":81,"categoryName":82,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000011","运维与部署","SCENARIO","使用场景",[86,87,88,89,36,90,76,91,92,93,94,95,23,22,96,97,98,99,100,101],"ZeRO","trust","zero trust","architecture","verification","segmentation","devops-security","access","configure","only","active","critical","scope","scripts","relevant","implementing",{"skillNo":103,"name":104,"nameZh":6,"description":105,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":106,"categories":107,"keywords":108,"publishedAt":38},"01M6Q0F1YZJW3KX5FBKEVZ8CV4","zcode-delegate","Delegate coding tasks to the Z.AI ZCode CLI only when the user explicitly requests it, while the orchestrator retains review and landing responsibility.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fzcode-delegate\u002FSKILL.md",[],[109,110,111,29,112,113,114,115,116,27,117,118,119,95,120,23,121,122,97,123],"delegate","zcode","zcode delegate","cli","orchestration","tasks","run","Bash","node","read","orchestrator","files","desktop app","app","agent-orchestration",{"skillNo":125,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":128,"categories":129,"keywords":130,"publishedAt":38},"01M6Q0ETK41VGNMYEXW0T00AJN","youtube-transcript","Fetch YouTube transcripts through DeepAPI or local fallback tooling and save clean text output.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-transcript\u002FSKILL.md",[],[131,132,133,134,37,135,136,34,33,137,138,139,140,23,22,141,142,143,144,145],"transcript","youtube transcript","youtube","safe","codex","research","text","fetch","tooling","clean","local","output","deepapi","youtube transcripts","blob",{"skillNo":147,"name":148,"nameZh":6,"description":149,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":150,"categories":151,"keywords":163,"publishedAt":38},"01M6Q0EPPH2PVMDW40017F8WX0","youtube-transcript-skills","Fetch YouTube video transcripts, search videos\u002Fchannels, browse channels, and extract playlists via the getyoutubetranscript.com API - free tier, no card required.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-transcript-skills\u002FSKILL.md",[152,155,158],{"categoryNo":153,"categoryName":154,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":156,"categoryName":157,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":159,"categoryName":160,"taxonomyType":161,"taxonomyTypeDesc":162},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[131,132,133,164,134,165,37,135,34,166,167,168,169,138,170,23,22,171,172,173],"youtube transcript skills","gemini","search","api","Video","browse","api-integration","free","card","channels",{"skillNo":175,"name":176,"nameZh":6,"description":177,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":178,"categories":179,"keywords":184,"publishedAt":38},"01M6Q0EAB96PX83W5PTE8A0R8D","youtube-notetaker","Turn YouTube talks into local study notes with slides, transcripts, editable annotations, and a markdown-backed viewer.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-notetaker\u002FSKILL.md",[180,183],{"categoryNo":181,"categoryName":182,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":156,"categoryName":157,"taxonomyType":83,"taxonomyTypeDesc":84},[133,185,186,112,134,187,188,189,190,34,168,191,192,193,194,22,195,141,196,197],"youtube notetaker","notetaker","workflow","official","notes","code","markdown","slides","annotations","README","study","dair-academy","viewer",{"skillNo":199,"name":200,"nameZh":6,"description":201,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":202,"categories":203,"keywords":205,"publishedAt":38},"01M6Q0E55F0GW5MX48V8HXS8B5","youtube-full","Fetch YouTube transcripts, search videos, browse channels, and extract playlists via TranscriptAPI — no yt-dlp, no Google API key, works from any cloud server.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-full\u002FSKILL.md",[204],{"categoryNo":153,"categoryName":154,"taxonomyType":83,"taxonomyTypeDesc":84},[206,133,207,208,134,165,166,209,210,167,168,169,138,211,170,23,22,171,212,144],"youtube full","full","google","server","dlp","credits","automatic"]