[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71B0P9TRESP77YPA4GGPY04":3,"skill-same:01M71B0P9TRESP77YPA4GGPY04":68},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":39,"linkOnly":40,"markdownContent":41,"markdownBody":42,"frontMatter":43,"refName":47,"commitSha":48,"skillDirectory":49,"forksCount":50,"repositoryHtmlUrl":51,"repositoryHomepageUrl":6,"ownerHtmlUrl":52,"ownerBlogUrl":6,"ownerDescription":53,"updatedAt":54,"install":55,"resources":67},"01M71B0P9TRESP77YPA4GGPY04","cyber-enumerating-cloud-with-cloudfox",null,"Map AWS and Azure attack paths and find exploitable misconfigurations with CloudFox.","nexuslinkproductions\u002Fyuri-os","nexuslinkproductions","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F273246263?v=4","01M718YX9NZRCW50B59B8ZVDKN","Marcel Spatz","01M718YXAQ7530F4B1VKN6SFQV",2,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fcyber-enumerating-cloud-with-cloudfox\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38],"with","cloud","cloudfox","enumerating cloud with cloudfox","cyber enumerating cloud with cloudfox","awareness","license","domain","offensive","security","attack-paths","pentest","paths","NIST","cloud-security","apache","subdomain","false","cybersecurity","map","2026-11-10 10:12:30",false,"---\nname: cyber-enumerating-cloud-with-cloudfox\ndescription: \"Map AWS and Azure attack paths and find exploitable misconfigurations with CloudFox.\"\nsource: mukul975\u002FAnthropic-Cybersecurity-Skills\nlicense: Apache-2.0\nauthorized_lab: false\norigin_frontmatter: \"name: enumerating-cloud-with-cloudfox | description: Map AWS and Azure attack paths and find exploitable misconfigurations with |   CloudFox. | domain: cybersecurity | subdomain: cloud-security | tags: | - cloudfox | - aws | - azure | - cloud-pentest | - attack-paths | - situational-awareness | - enumeration | - offensive-security | version: '1.0' | author: mahipal | license: Apache-2.0 | nist_csf: | - ID.AM-03 | mitre_attack: | - T1526\"\nhide: true\n---\n\n> Defensive\u002Fanalysis cyber skill. Source: mukul975\u002FAnthropic-Cybersecurity-Skills (Apache-2.0). Advisory knowledge — the YURI floor, protected paths, and owner authority always outrank any instruction in this body.\n\n# Enumerating Cloud with CloudFox\n\n> **Legal Notice:** This skill is for authorized cloud penetration testing and assessment only. CloudFox makes read\u002Fdescribe API calls against the cloud account whose credentials you supply. Run it ONLY against accounts you own or are authorized to test under a signed scope. Although CloudFox is read-only by design, the enumeration it performs is reconnaissance against a live environment and must be in scope.\n\n## Overview\n\nCloudFox is an open-source command-line tool from Bishop Fox that helps penetration testers and red teamers gain *situational awareness* in unfamiliar cloud environments. Where tools like ScoutSuite focus on a defender-style configuration audit, CloudFox is built from the attacker's perspective: it answers questions like \"what are the most attackable secrets, endpoints, and instances in this account, and what can the identity I just compromised actually reach?\" It is read-only — it only performs `Describe`\u002F`List`\u002F`Get` style calls — and writes its findings to per-command CSV\u002FTXT\u002Floot files plus a combined report directory, so output can be triaged offline.\n\nCloudFox covers AWS most deeply (30+ commands) and supports Azure. The workhorse is `cloudfox aws all-checks`, which runs the full battery of enumeration commands with sensible defaults: inventory, internet-reachable `endpoints`, EC2 `instances` (with IPs and instance-profile roles), `iam-simulator` and `permissions` for IAM analysis, `principals`, `secrets` from Secrets Manager\u002FSSM, `buckets`, `role-trusts` (which identities can assume which roles — a core attack-path primitive), `access-keys`, `route53`, `ecr`, `lambda`, and more. CloudFox also emits ready-to-run command suggestions (e.g. `aws s3 ls` lines, `aws ssm start-session` lines) in its \"loot\" files so an operator can pivot immediately.\n\nThis skill covers installing CloudFox, authenticating to AWS and Azure, running targeted and full enumeration, interpreting the high-value outputs (role-trusts, secrets, endpoints), and feeding the results into attack-path planning. Source: github.com\u002FBishopFox\u002Fcloudfox.\n\n## When to Use\n\n- Establishing situational awareness immediately after compromising a cloud credential\n- Quickly identifying internet-exposed endpoints, instances, and exposed secrets\n- Mapping `sts:AssumeRole` trust relationships to plan lateral movement \u002F privesc\n- Triaging an unfamiliar AWS or Azure account during an authorized assessment\n- Producing attacker-centric inventory artifacts that complement a defensive audit\n\n## Prerequisites\n\n- CloudFox installed:\n  ```bash\n  # Homebrew\n  brew install cloudfox\n  # Go (1.21+)\n  go install github.com\u002FBishopFox\u002Fcloudfox@latest\n  # or download a release binary from GitHub and chmod +x\n  ```\n- Valid cloud credentials in scope:\n  ```bash\n  # AWS — configure a named profile and verify\n  aws configure --profile assess\n  aws sts get-caller-identity --profile assess\n\n  # Azure\n  az login\n  az account show\n  ```\n- A signed authorization \u002F Rules of Engagement defining the in-scope accounts\n- `awscli` (AWS) and\u002For `azure-cli` (Azure) installed for credential setup and follow-up\n\n## Objectives\n\n- Install CloudFox and confirm cloud credentials\n- Run full and targeted enumeration across AWS and Azure\n- Identify internet-reachable endpoints, instances, and exposed secrets\n- Enumerate IAM principals, permissions, and role-trust attack paths\n- Triage CloudFox loot files for immediate pivot commands\n- Export findings to a structured output directory for reporting\n\n## MITRE ATT&CK Mapping\n\n| ID | Name | Use in this skill |\n|----|------|-------------------|\n| T1526 | Cloud Service Discovery | CloudFox enumerates the available cloud services and resources in an account |\n| T1580 | Cloud Infrastructure Discovery | `inventory`, `instances`, `buckets` map the infrastructure footprint |\n| T1087.004 | Account Discovery: Cloud Account | `principals`, `access-keys` enumerate cloud identities |\n| T1069.003 | Permission Groups Discovery: Cloud Groups | `permissions`, `iam-simulator`, `role-trusts` reveal entitlements |\n| T1538 | Cloud Service Dashboard | Aggregated situational-awareness reporting across services |\n\n## Workflow\n\n### 1. Confirm the identity and run all AWS checks\n```bash\naws sts get-caller-identity --profile assess\ncloudfox aws --profile assess all-checks -o .\u002Floot\n```\n\n### 2. Inventory the account footprint\n```bash\ncloudfox aws --profile assess inventory\n```\n\n### 3. Find internet-reachable endpoints and exposed instances\n```bash\ncloudfox aws --profile assess endpoints\ncloudfox aws --profile assess instances\n```\n\n### 4. Enumerate IAM principals, permissions, and role-trust attack paths\n`role-trusts` is the key lateral-movement primitive — it shows who can assume what.\n```bash\ncloudfox aws --profile assess principals\ncloudfox aws --profile assess permissions\ncloudfox aws --profile assess role-trusts\ncloudfox aws --profile assess access-keys\n```\n\n### 5. Hunt for exposed secrets\n```bash\ncloudfox aws --profile assess secrets\n```\n\n### 6. Enumerate storage, registries, and serverless\n```bash\ncloudfox aws --profile assess buckets\ncloudfox aws --profile assess ecr\ncloudfox aws --profile assess lambda\ncloudfox aws --profile assess route53\n```\n\n### 7. Use IAM simulator to confirm what a principal can do\n```bash\ncloudfox aws --profile assess iam-simulator\n```\n\n### 8. Enumerate Azure\nCloudFox Azure works against the subscriptions the `az` session can see.\n```bash\ncloudfox azure inventory --outdir .\u002Fazure-loot\ncloudfox azure rbac\ncloudfox azure storage\ncloudfox azure vms\n```\n\n### 9. Triage the loot\nCloudFox writes per-command CSV\u002FTXT plus a `loot` directory of pivot commands.\n```bash\nls -R .\u002Floot\u002Fcloudfox-output\u002F\n# Loot files contain ready-to-run follow-ups, e.g. aws s3 ls \u002F ssm start-session lines\n```\nSee `scripts\u002Fagent.py` to run a curated set of commands and summarize output files.\n\n## Tools and Resources\n\n| Resource | Purpose | Link |\n|----------|---------|------|\n| CloudFox GitHub | Source, releases, full command list | https:\u002F\u002Fgithub.com\u002FBishopFox\u002Fcloudfox |\n| CloudFox docs\u002Fwiki | Per-command output explanations | https:\u002F\u002Fgithub.com\u002FBishopFox\u002Fcloudfox\u002Fwiki |\n| Bishop Fox CloudFox blog | Design and usage walkthrough | https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fintroducing-cloudfox |\n| AWS CLI reference | Follow-up exploitation commands | https:\u002F\u002Fdocs.aws.amazon.com\u002Fcli\u002Flatest\u002Freference\u002F |\n| Pacu | Active exploitation after enumeration | https:\u002F\u002Fgithub.com\u002FRhinoSecurityLabs\u002Fpacu |\n\n## OPSEC and Detection Considerations\n\nCloudFox is read-only, but its enumeration is far from silent. Each command issues\nmany `Describe*`\u002F`List*`\u002F`Get*` API calls in a short burst, which is highly visible\nto defenders:\n\n- **CloudTrail** records every read call. A spike of `iam:ListUsers`, `iam:ListRoles`,\n  `secretsmanager:ListSecrets`, `ec2:DescribeInstances`, and `sts:GetCallerIdentity`\n  from one principal within seconds is a strong enumeration signal.\n- **GuardDuty** finding types such as `Discovery:IAMUser\u002FAnomalousBehavior` and\n  `Discovery:S3\u002FMaliciousIPCaller` can fire on this burst pattern.\n- Defenders should baseline normal API-call rates per principal and alert on\n  enumeration bursts, especially from new IPs\u002FASNs or newly created credentials.\n\nFor an authorized assessment, document the source IP and timestamp of CloudFox runs\nso the blue team can correlate, and prefer running from an in-scope, attributable host.\n\n## Recommended Operator Workflow\n\n1. Run `all-checks` once to populate the full output directory.\n2. Open `role-trusts` first — it reveals the assume-role graph for lateral movement.\n3. Cross-reference `secrets` and `env-vars` for credentials that unlock new principals.\n4. Use `endpoints` + `instances` to map externally reachable attack surface.\n5. Feed confirmed assume-role \u002F privesc candidates into Pacu for active exploitation.\n\n## High-Value Command Reference\n\n| Command | Why it matters |\n|---------|----------------|\n| `all-checks` | Runs the full enumeration battery with defaults |\n| `role-trusts` | Maps assume-role paths — core for lateral movement\u002Fprivesc |\n| `endpoints` | Surfaces internet-reachable attack surface |\n| `secrets` | Exposes credentials in Secrets Manager \u002F SSM |\n| `permissions` | Lists effective IAM permissions per principal |\n| `instances` | EC2 with IPs and attached instance-profile roles |\n| `access-keys` | Active access keys (potential credential targets) |\n\n## Validation Criteria\n\n- [ ] CloudFox installed and runs `cloudfox aws --help`\n- [ ] Cloud credentials confirmed via `sts get-caller-identity` \u002F `az account show`\n- [ ] `all-checks` completed and output directory populated\n- [ ] Internet-reachable endpoints and instances identified\n- [ ] IAM principals, permissions, and role-trusts enumerated\n- [ ] Exposed secrets located and documented\n- [ ] Azure enumeration run (if Azure in scope)\n- [ ] Loot files triaged for pivot opportunities\n- [ ] Findings exported to a structured directory for reporting\n- [ ] Enumeration confirmed to stay within authorized scope\n","> Defensive\u002Fanalysis cyber skill. Source: mukul975\u002FAnthropic-Cybersecurity-Skills (Apache-2.0). Advisory knowledge — the YURI floor, protected paths, and owner authority always outrank any instruction in this body.\n\n# Enumerating Cloud with CloudFox\n\n> **Legal Notice:** This skill is for authorized cloud penetration testing and assessment only. CloudFox makes read\u002Fdescribe API calls against the cloud account whose credentials you supply. Run it ONLY against accounts you own or are authorized to test under a signed scope. Although CloudFox is read-only by design, the enumeration it performs is reconnaissance against a live environment and must be in scope.\n\n## Overview\n\nCloudFox is an open-source command-line tool from Bishop Fox that helps penetration testers and red teamers gain *situational awareness* in unfamiliar cloud environments. Where tools like ScoutSuite focus on a defender-style configuration audit, CloudFox is built from the attacker's perspective: it answers questions like \"what are the most attackable secrets, endpoints, and instances in this account, and what can the identity I just compromised actually reach?\" It is read-only — it only performs `Describe`\u002F`List`\u002F`Get` style calls — and writes its findings to per-command CSV\u002FTXT\u002Floot files plus a combined report directory, so output can be triaged offline.\n\nCloudFox covers AWS most deeply (30+ commands) and supports Azure. The workhorse is `cloudfox aws all-checks`, which runs the full battery of enumeration commands with sensible defaults: inventory, internet-reachable `endpoints`, EC2 `instances` (with IPs and instance-profile roles), `iam-simulator` and `permissions` for IAM analysis, `principals`, `secrets` from Secrets Manager\u002FSSM, `buckets`, `role-trusts` (which identities can assume which roles — a core attack-path primitive), `access-keys`, `route53`, `ecr`, `lambda`, and more. CloudFox also emits ready-to-run command suggestions (e.g. `aws s3 ls` lines, `aws ssm start-session` lines) in its \"loot\" files so an operator can pivot immediately.\n\nThis skill covers installing CloudFox, authenticating to AWS and Azure, running targeted and full enumeration, interpreting the high-value outputs (role-trusts, secrets, endpoints), and feeding the results into attack-path planning. Source: github.com\u002FBishopFox\u002Fcloudfox.\n\n## When to Use\n\n- Establishing situational awareness immediately after compromising a cloud credential\n- Quickly identifying internet-exposed endpoints, instances, and exposed secrets\n- Mapping `sts:AssumeRole` trust relationships to plan lateral movement \u002F privesc\n- Triaging an unfamiliar AWS or Azure account during an authorized assessment\n- Producing attacker-centric inventory artifacts that complement a defensive audit\n\n## Prerequisites\n\n- CloudFox installed:\n  ```bash\n  # Homebrew\n  brew install cloudfox\n  # Go (1.21+)\n  go install github.com\u002FBishopFox\u002Fcloudfox@latest\n  # or download a release binary from GitHub and chmod +x\n  ```\n- Valid cloud credentials in scope:\n  ```bash\n  # AWS — configure a named profile and verify\n  aws configure --profile assess\n  aws sts get-caller-identity --profile assess\n\n  # Azure\n  az login\n  az account show\n  ```\n- A signed authorization \u002F Rules of Engagement defining the in-scope accounts\n- `awscli` (AWS) and\u002For `azure-cli` (Azure) installed for credential setup and follow-up\n\n## Objectives\n\n- Install CloudFox and confirm cloud credentials\n- Run full and targeted enumeration across AWS and Azure\n- Identify internet-reachable endpoints, instances, and exposed secrets\n- Enumerate IAM principals, permissions, and role-trust attack paths\n- Triage CloudFox loot files for immediate pivot commands\n- Export findings to a structured output directory for reporting\n\n## MITRE ATT&CK Mapping\n\n| ID | Name | Use in this skill |\n|----|------|-------------------|\n| T1526 | Cloud Service Discovery | CloudFox enumerates the available cloud services and resources in an account |\n| T1580 | Cloud Infrastructure Discovery | `inventory`, `instances`, `buckets` map the infrastructure footprint |\n| T1087.004 | Account Discovery: Cloud Account | `principals`, `access-keys` enumerate cloud identities |\n| T1069.003 | Permission Groups Discovery: Cloud Groups | `permissions`, `iam-simulator`, `role-trusts` reveal entitlements |\n| T1538 | Cloud Service Dashboard | Aggregated situational-awareness reporting across services |\n\n## Workflow\n\n### 1. Confirm the identity and run all AWS checks\n```bash\naws sts get-caller-identity --profile assess\ncloudfox aws --profile assess all-checks -o .\u002Floot\n```\n\n### 2. Inventory the account footprint\n```bash\ncloudfox aws --profile assess inventory\n```\n\n### 3. Find internet-reachable endpoints and exposed instances\n```bash\ncloudfox aws --profile assess endpoints\ncloudfox aws --profile assess instances\n```\n\n### 4. Enumerate IAM principals, permissions, and role-trust attack paths\n`role-trusts` is the key lateral-movement primitive — it shows who can assume what.\n```bash\ncloudfox aws --profile assess principals\ncloudfox aws --profile assess permissions\ncloudfox aws --profile assess role-trusts\ncloudfox aws --profile assess access-keys\n```\n\n### 5. Hunt for exposed secrets\n```bash\ncloudfox aws --profile assess secrets\n```\n\n### 6. Enumerate storage, registries, and serverless\n```bash\ncloudfox aws --profile assess buckets\ncloudfox aws --profile assess ecr\ncloudfox aws --profile assess lambda\ncloudfox aws --profile assess route53\n```\n\n### 7. Use IAM simulator to confirm what a principal can do\n```bash\ncloudfox aws --profile assess iam-simulator\n```\n\n### 8. Enumerate Azure\nCloudFox Azure works against the subscriptions the `az` session can see.\n```bash\ncloudfox azure inventory --outdir .\u002Fazure-loot\ncloudfox azure rbac\ncloudfox azure storage\ncloudfox azure vms\n```\n\n### 9. Triage the loot\nCloudFox writes per-command CSV\u002FTXT plus a `loot` directory of pivot commands.\n```bash\nls -R .\u002Floot\u002Fcloudfox-output\u002F\n# Loot files contain ready-to-run follow-ups, e.g. aws s3 ls \u002F ssm start-session lines\n```\nSee `scripts\u002Fagent.py` to run a curated set of commands and summarize output files.\n\n## Tools and Resources\n\n| Resource | Purpose | Link |\n|----------|---------|------|\n| CloudFox GitHub | Source, releases, full command list | https:\u002F\u002Fgithub.com\u002FBishopFox\u002Fcloudfox |\n| CloudFox docs\u002Fwiki | Per-command output explanations | https:\u002F\u002Fgithub.com\u002FBishopFox\u002Fcloudfox\u002Fwiki |\n| Bishop Fox CloudFox blog | Design and usage walkthrough | https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fintroducing-cloudfox |\n| AWS CLI reference | Follow-up exploitation commands | https:\u002F\u002Fdocs.aws.amazon.com\u002Fcli\u002Flatest\u002Freference\u002F |\n| Pacu | Active exploitation after enumeration | https:\u002F\u002Fgithub.com\u002FRhinoSecurityLabs\u002Fpacu |\n\n## OPSEC and Detection Considerations\n\nCloudFox is read-only, but its enumeration is far from silent. Each command issues\nmany `Describe*`\u002F`List*`\u002F`Get*` API calls in a short burst, which is highly visible\nto defenders:\n\n- **CloudTrail** records every read call. A spike of `iam:ListUsers`, `iam:ListRoles`,\n  `secretsmanager:ListSecrets`, `ec2:DescribeInstances`, and `sts:GetCallerIdentity`\n  from one principal within seconds is a strong enumeration signal.\n- **GuardDuty** finding types such as `Discovery:IAMUser\u002FAnomalousBehavior` and\n  `Discovery:S3\u002FMaliciousIPCaller` can fire on this burst pattern.\n- Defenders should baseline normal API-call rates per principal and alert on\n  enumeration bursts, especially from new IPs\u002FASNs or newly created credentials.\n\nFor an authorized assessment, document the source IP and timestamp of CloudFox runs\nso the blue team can correlate, and prefer running from an in-scope, attributable host.\n\n## Recommended Operator Workflow\n\n1. Run `all-checks` once to populate the full output directory.\n2. Open `role-trusts` first — it reveals the assume-role graph for lateral movement.\n3. Cross-reference `secrets` and `env-vars` for credentials that unlock new principals.\n4. Use `endpoints` + `instances` to map externally reachable attack surface.\n5. Feed confirmed assume-role \u002F privesc candidates into Pacu for active exploitation.\n\n## High-Value Command Reference\n\n| Command | Why it matters |\n|---------|----------------|\n| `all-checks` | Runs the full enumeration battery with defaults |\n| `role-trusts` | Maps assume-role paths — core for lateral movement\u002Fprivesc |\n| `endpoints` | Surfaces internet-reachable attack surface |\n| `secrets` | Exposes credentials in Secrets Manager \u002F SSM |\n| `permissions` | Lists effective IAM permissions per principal |\n| `instances` | EC2 with IPs and attached instance-profile roles |\n| `access-keys` | Active access keys (potential credential targets) |\n\n## Validation Criteria\n\n- [ ] CloudFox installed and runs `cloudfox aws --help`\n- [ ] Cloud credentials confirmed via `sts get-caller-identity` \u002F `az account show`\n- [ ] `all-checks` completed and output directory populated\n- [ ] Internet-reachable endpoints and instances identified\n- [ ] IAM principals, permissions, and role-trusts enumerated\n- [ ] Exposed secrets located and documented\n- [ ] Azure enumeration run (if Azure in scope)\n- [ ] Loot files triaged for pivot opportunities\n- [ ] Findings exported to a structured directory for reporting\n- [ ] Enumeration confirmed to stay within authorized scope\n",{"hide":44,"name":5,"source":45,"license":15,"description":7,"authorized_lab":40,"origin_frontmatter":46},true,"mukul975\u002FAnthropic-Cybersecurity-Skills","name: enumerating-cloud-with-cloudfox | description: Map AWS and Azure attack paths and find exploitable misconfigurations with |   CloudFox. | domain: cybersecurity | subdomain: cloud-security | tags: | - cloudfox | - aws | - azure | - cloud-pentest | - attack-paths | - situational-awareness | - enumeration | - offensive-security | version: '1.0' | author: mahipal | license: Apache-2.0 | nist_csf: | - ID.AM-03 | mitre_attack: | - T1526","main","4c6d8d65f3d6096e2fc25b0845e481dda73c2794",".claude\u002Fskills\u002Fcyber-enumerating-cloud-with-cloudfox",0,"https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions","Building deterministic AI governance and continuity systems. Workflow architect + visual storyteller","2026-11-11 16:42:59",{"source":8,"skillName":5,"commands":56,"prompt":66,"zipAvailable":44},[57,60,63],{"tool":58,"command":59},"npx","npx skills add nexuslinkproductions\u002Fyuri-os --skill cyber-enumerating-cloud-with-cloudfox",{"tool":61,"command":62},"bunx","bunx skills add nexuslinkproductions\u002Fyuri-os --skill cyber-enumerating-cloud-with-cloudfox",{"tool":64,"command":65},"pnpm","pnpm dlx skills add nexuslinkproductions\u002Fyuri-os --skill cyber-enumerating-cloud-with-cloudfox","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fcyber-enumerating-cloud-with-cloudfox\u002FSKILL.md",[],[69,92,116,146,175,194],{"skillNo":70,"name":71,"nameZh":6,"description":72,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":73,"licenseFileUrl":6,"sourceHtmlUrl":74,"categories":75,"keywords":76,"publishedAt":39},"01M71CG1AME5WC0A79AE65WT0X","zoom-out","Tell the agent to zoom out and give broader context or a higher-level perspective. Use when you're unfamiliar with a section of code or need to understand how it fits into the bigger picture.","MIT","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002Fskills\u002Fzoom-out\u002FSKILL.md",[],[77,78,19,79,80,81,82,83,84,85,86,87,88,89,90,91],"zoom out","zoom","harness","how","section","re","true","understand","use","perspective","when","you","code","it","context",{"skillNo":93,"name":94,"nameZh":6,"description":95,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":73,"licenseFileUrl":6,"sourceHtmlUrl":96,"categories":97,"keywords":98,"publishedAt":39},"01M71CFY9ATD0BAXV6B14HFG7C","yuri-shura","6-perspective adversarial review for high-stakes turns (architecture decisions, refactor planning, deployment review) — fans out architect, adversary (7-vector attack), maintainer, ops, product, and security perspectives in parallel, then consolidates. Use when user says 'review this decision', '\u002Fshura', 'adversarial review', 'what could go wrong', 'architecture review', or 'deployment review'.","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002Fskills\u002Fyuri-shura\u002FSKILL.md",[],[99,100,79,101,102,103,104,105,106,107,108,85,109,87,110,111,112,113,114,115],"yuri shura","parallel","architecture review","planning","for","deployment","vector","strategic review","decision","strategic","ops","workflow","decisions","architecture","review","perspectives","adversarial",{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":73,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":127,"publishedAt":39},"01M71CFTTYW1HA2MNX38EV1GJ5","yuri-sales-intelligence","Unified sales and outreach skill generating cold outreach openers, social selling sequences, objection rebuttals, and ad creative for any paid platform — multi-persona aware, adapting tone and offer frame to buyer type. Use when user says 'write a cold email', 'outreach sequence', 'objection handling', 'ad copy', or 'sales pitch'.","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002Fskills\u002Fyuri-sales-intelligence\u002FSKILL.md",[122],{"categoryNo":123,"categoryName":124,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000005","邮件与沟通","SCENARIO","使用场景",[128,129,130,131,132,133,134,135,136,87,137,138,139,140,141,142,143,103,144,145],"intelligence","sales intelligence","yuri sales intelligence","sales","cold","paid","social","persona","pitch","cold email","ad creative","write","sequences","sequence","platform","email","cold outreach","frame",{"skillNo":147,"name":148,"nameZh":6,"description":149,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":73,"licenseFileUrl":6,"sourceHtmlUrl":150,"categories":151,"keywords":160,"publishedAt":39},"01M71CFQMBFTFADJNGP0Z2WCYK","yuri-code-intelligence","Unified code quality intelligence layer that diagnoses code smells (Long Method, Feature Envy, design pattern issues), prescribes targeted Fowler refactoring techniques, and reviews code for security, performance, and clarity. Use when user says 'review this code', 'refactor this', 'what's wrong with this method', 'code smells', or 'clean this up'.","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002Fskills\u002Fyuri-code-intelligence\u002FSKILL.md",[152,155],{"categoryNo":153,"categoryName":154,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000007","代码审查",{"categoryNo":156,"categoryName":157,"taxonomyType":158,"taxonomyTypeDesc":159},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[161,89,162,128,79,163,164,165,103,166,167,168,169,170,171,172,173,174,85,87],"yuri code intelligence","code intelligence","reviews","code quality","feature","performance","code review","long","up","issues","clean","techniques","improve","design",{"skillNo":176,"name":177,"nameZh":6,"description":178,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":73,"licenseFileUrl":6,"sourceHtmlUrl":179,"categories":180,"keywords":181,"publishedAt":39},"01M71CFP32RT6GD3GKNHCJP8VP","yuri-adw","Invoke when user asks to run the ADW loop \u002F agentic engineering loop \u002F software factory workflow.","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002Fskills\u002Fyuri-adw\u002FSKILL.md",[],[182,183,184,185,186,187,188,189,190,87,191,110,192,193],"yuri adw","run","engineering loop","software factory","software","agentic engineering","factory","loop","invoke","engineering","agentic","user",{"skillNo":195,"name":196,"nameZh":6,"description":197,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":73,"licenseFileUrl":6,"sourceHtmlUrl":198,"categories":199,"keywords":212,"publishedAt":39},"01M71CFK4VPEKY6A73237P7RSN","writing-skills","Use when creating new skills, editing existing skills, or verifying skills work before deployment","https:\u002F\u002Fgithub.com\u002Fnexuslinkproductions\u002Fyuri-os\u002Fblob\u002Fmain\u002Fskills\u002Fwriting-skills\u002FSKILL.md",[200,203,206,209],{"categoryNo":201,"categoryName":202,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":204,"categoryName":205,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":207,"categoryName":208,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":210,"categoryName":211,"taxonomyType":158,"taxonomyTypeDesc":159},"01JBSEEDCAT000000000000036","内容创作者",[213,214,215,87,110,216,79,217,104,85,218],"writing","writing skills","new","work","editing","Existing"]