[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M73FKFSQE804DKKT1YXSABV9":3,"skill-same:01M73FKFSQE804DKKT1YXSABV9":106},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":16,"sourceHtmlUrl":17,"categories":18,"keywords":19,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":23,"frontMatter":24,"refName":48,"commitSha":49,"skillDirectory":50,"forksCount":51,"repositoryHtmlUrl":52,"repositoryHomepageUrl":53,"ownerHtmlUrl":54,"ownerBlogUrl":55,"ownerDescription":56,"updatedAt":57,"install":58,"resources":71},"01M73FKFSQE804DKKT1YXSABV9","scanning-docker-images-with-trivy",null,"Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati","Horonomos-laps\u002FYana-AI","Horonomos-laps","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F355299122?v=4","01M76B3QPXE88ET2SQPDPVATZT"," Horonomos-laps","01M72ZQRJPCYPSSWT4D00VJR2A",13,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: scanning-docker-images-with-trivy\ndescription: Trivy is a comprehensive open-source vulnerability scanner by Aqua Security\n  that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations,\n  secrets, and license violati\ndomain: cybersecurity\nsubdomain: container-security\ntags:\n- containers\n- docker\n- security\n- trivy\n- vulnerability-scanning\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- PR.IR-01\n- ID.AM-08\n- DE.CM-01\nmitre_attack:\n- T1610\n- T1611\n- T1609\n- T1525\n- T1190\nsource: https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\nsource_commit: 04450304b12645cb2b974ab96d28c0664758a88d\n---\n# Scanning Docker Images with Trivy\n\n## Overview\n\nTrivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violations within container images. It integrates into CI\u002FCD pipelines and supports multiple output formats including SARIF, CycloneDX, and SPDX.\n\n\n## When to Use\n\n- When conducting security assessments that involve scanning docker images with trivy\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Docker Engine 20.10+\n- Trivy v0.50+ installed\n- Internet access for vulnerability database updates\n- Container registry credentials (for private registries)\n\n## Core Concepts\n\n### Scanner Types\n\n| Scanner | Flag | Detects |\n|---------|------|---------|\n| Vulnerability | `--scanners vuln` | CVEs in OS packages and libraries |\n| Misconfiguration | `--scanners misconfig` | Dockerfile\u002FK8s manifest misconfigs |\n| Secret | `--scanners secret` | Hardcoded passwords, API keys, tokens |\n| License | `--scanners license` | Software license compliance issues |\n\n### Severity Levels\n\n- **CRITICAL**: CVSS 9.0-10.0 - Immediate action required\n- **HIGH**: CVSS 7.0-8.9 - Fix before production deployment\n- **MEDIUM**: CVSS 4.0-6.9 - Plan remediation\n- **LOW**: CVSS 0.1-3.9 - Accept or fix opportunistically\n- **UNKNOWN**: Unscored - Evaluate manually\n\n### Vulnerability Database\n\nTrivy uses multiple vulnerability databases:\n- NVD (National Vulnerability Database)\n- Red Hat Security Data\n- Alpine SecDB\n- Debian Security Tracker\n- Ubuntu CVE Tracker\n- Amazon Linux Security Center\n- GitHub Advisory Database\n\n## Workflow\n\n### Step 1: Install Trivy\n\n```bash\n# Linux (apt)\nsudo apt-get install wget apt-transport-https gnupg lsb-release\nwget -qO - https:\u002F\u002Faquasecurity.github.io\u002Ftrivy-repo\u002Fdeb\u002Fpublic.key | gpg --dearmor | sudo tee \u002Fusr\u002Fshare\u002Fkeyrings\u002Ftrivy.gpg > \u002Fdev\u002Fnull\necho \"deb [signed-by=\u002Fusr\u002Fshare\u002Fkeyrings\u002Ftrivy.gpg] https:\u002F\u002Faquasecurity.github.io\u002Ftrivy-repo\u002Fdeb $(lsb_release -sc) main\" | sudo tee -a \u002Fetc\u002Fapt\u002Fsources.list.d\u002Ftrivy.list\nsudo apt-get update && sudo apt-get install trivy\n\n# macOS\nbrew install trivy\n\n# Docker\ndocker pull aquasecurity\u002Ftrivy:latest\n```\n\n### Step 2: Basic Image Scanning\n\n```bash\n# Scan a public image\ntrivy image python:3.12-slim\n\n# Scan with severity filter\ntrivy image --severity CRITICAL,HIGH nginx:latest\n\n# Ignore unfixed vulnerabilities\ntrivy image --ignore-unfixed alpine:3.19\n\n# Scan local image\ndocker build -t myapp:latest .\ntrivy image myapp:latest\n\n# Scan from tar archive\ndocker save myapp:latest -o myapp.tar\ntrivy image --input myapp.tar\n```\n\n### Step 3: Advanced Scanning Options\n\n```bash\n# All scanners (vuln + misconfig + secret + license)\ntrivy image --scanners vuln,misconfig,secret,license myapp:latest\n\n# Generate SBOM in CycloneDX format\ntrivy image --format cyclonedx --output sbom.cdx.json myapp:latest\n\n# Generate SBOM in SPDX format\ntrivy image --format spdx-json --output sbom.spdx.json myapp:latest\n\n# JSON output for programmatic processing\ntrivy image --format json --output results.json myapp:latest\n\n# SARIF output for GitHub Security tab\ntrivy image --format sarif --output results.sarif myapp:latest\n\n# Template-based output\ntrivy image --format template --template \"@contrib\u002Fhtml.tpl\" --output report.html myapp:latest\n\n# Scan specific layers only\ntrivy image --list-all-pkgs myapp:latest\n```\n\n### Step 4: Scanning Kubernetes Manifests\n\n```bash\n# Scan Dockerfile for misconfigurations\ntrivy config Dockerfile\n\n# Scan Kubernetes manifests\ntrivy config k8s-deployment.yaml\n\n# Scan Helm charts\ntrivy config .\u002Fhelm-chart\u002F\n\n# Scan Terraform files\ntrivy config .\u002Fterraform\u002F\n```\n\n### Step 5: CI\u002FCD Integration\n\n```yaml\n# GitHub Actions\nname: Trivy Container Scan\non: push\n\njobs:\n  scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n\n      - name: Build image\n        run: docker build -t myapp:${{ github.sha }} .\n\n      - name: Run Trivy vulnerability scanner\n        uses: aquasecurity\u002Ftrivy-action@master\n        with:\n          image-ref: myapp:${{ github.sha }}\n          format: sarif\n          output: trivy-results.sarif\n          severity: CRITICAL,HIGH\n          exit-code: 1\n\n      - name: Upload Trivy scan results\n        uses: github\u002Fcodeql-action\u002Fupload-sarif@v3\n        if: always()\n        with:\n          sarif_file: trivy-results.sarif\n\n      - name: Generate SBOM\n        uses: aquasecurity\u002Ftrivy-action@master\n        with:\n          image-ref: myapp:${{ github.sha }}\n          format: cyclonedx\n          output: sbom.cdx.json\n```\n\n```yaml\n# GitLab CI\ntrivy-scan:\n  stage: security\n  image:\n    name: aquasecurity\u002Ftrivy:latest\n    entrypoint: [\"\"]\n  script:\n    - trivy image --exit-code 1 --severity CRITICAL,HIGH\n        --format json --output gl-container-scanning-report.json\n        $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA\n  artifacts:\n    reports:\n      container_scanning: gl-container-scanning-report.json\n```\n\n### Step 6: Policy Enforcement with .trivyignore\n\n```bash\n# .trivyignore - Ignore specific CVEs with expiry\n# Accepted risk: low-impact vulnerability in dev dependency\nCVE-2023-12345 exp:2025-06-01\n\n# False positive: not exploitable in our configuration\nCVE-2024-67890\n\n# Vendor will not fix\nCVE-2023-11111\n```\n\n### Step 7: Scan Private Registry Images\n\n```bash\n# Docker Hub (uses ~\u002F.docker\u002Fconfig.json)\ntrivy image myregistry.azurecr.io\u002Fmyapp:latest\n\n# ECR\naws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin \u003Caccount>.dkr.ecr.us-east-1.amazonaws.com\ntrivy image \u003Caccount>.dkr.ecr.us-east-1.amazonaws.com\u002Fmyapp:latest\n\n# GCR\ntrivy image gcr.io\u002Fmy-project\u002Fmyapp:latest\n\n# With explicit credentials\nTRIVY_USERNAME=user TRIVY_PASSWORD=pass trivy image registry.example.com\u002Fmyapp:latest\n```\n\n## Validation Commands\n\n```bash\n# Verify Trivy installation\ntrivy version\n\n# Update vulnerability database\ntrivy image --download-db-only\n\n# Quick scan with table output\ntrivy image --severity CRITICAL python:3.12\n\n# Verify no CRITICAL vulnerabilities\ntrivy image --exit-code 1 --severity CRITICAL myapp:latest\necho \"Exit code: $?\"  # 0 = no vulns, 1 = vulns found\n```\n\n## References\n\n- [Trivy Documentation](https:\u002F\u002Ftrivy.dev\u002Fdocs\u002F)\n- [Trivy GitHub Repository](https:\u002F\u002Fgithub.com\u002Faquasecurity\u002Ftrivy)\n- [Trivy GitHub Action](https:\u002F\u002Fgithub.com\u002Faquasecurity\u002Ftrivy-action)\n- [Aqua Security - Trivy Scanner Guide](https:\u002F\u002Fwww.aquasec.com\u002Fproducts\u002Ftrivy\u002F)\n","# Scanning Docker Images with Trivy\n\n## Overview\n\nTrivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violations within container images. It integrates into CI\u002FCD pipelines and supports multiple output formats including SARIF, CycloneDX, and SPDX.\n\n\n## When to Use\n\n- When conducting security assessments that involve scanning docker images with trivy\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Docker Engine 20.10+\n- Trivy v0.50+ installed\n- Internet access for vulnerability database updates\n- Container registry credentials (for private registries)\n\n## Core Concepts\n\n### Scanner Types\n\n| Scanner | Flag | Detects |\n|---------|------|---------|\n| Vulnerability | `--scanners vuln` | CVEs in OS packages and libraries |\n| Misconfiguration | `--scanners misconfig` | Dockerfile\u002FK8s manifest misconfigs |\n| Secret | `--scanners secret` | Hardcoded passwords, API keys, tokens |\n| License | `--scanners license` | Software license compliance issues |\n\n### Severity Levels\n\n- **CRITICAL**: CVSS 9.0-10.0 - Immediate action required\n- **HIGH**: CVSS 7.0-8.9 - Fix before production deployment\n- **MEDIUM**: CVSS 4.0-6.9 - Plan remediation\n- **LOW**: CVSS 0.1-3.9 - Accept or fix opportunistically\n- **UNKNOWN**: Unscored - Evaluate manually\n\n### Vulnerability Database\n\nTrivy uses multiple vulnerability databases:\n- NVD (National Vulnerability Database)\n- Red Hat Security Data\n- Alpine SecDB\n- Debian Security Tracker\n- Ubuntu CVE Tracker\n- Amazon Linux Security Center\n- GitHub Advisory Database\n\n## Workflow\n\n### Step 1: Install Trivy\n\n```bash\n# Linux (apt)\nsudo apt-get install wget apt-transport-https gnupg lsb-release\nwget -qO - https:\u002F\u002Faquasecurity.github.io\u002Ftrivy-repo\u002Fdeb\u002Fpublic.key | gpg --dearmor | sudo tee \u002Fusr\u002Fshare\u002Fkeyrings\u002Ftrivy.gpg > \u002Fdev\u002Fnull\necho \"deb [signed-by=\u002Fusr\u002Fshare\u002Fkeyrings\u002Ftrivy.gpg] https:\u002F\u002Faquasecurity.github.io\u002Ftrivy-repo\u002Fdeb $(lsb_release -sc) main\" | sudo tee -a \u002Fetc\u002Fapt\u002Fsources.list.d\u002Ftrivy.list\nsudo apt-get update && sudo apt-get install trivy\n\n# macOS\nbrew install trivy\n\n# Docker\ndocker pull aquasecurity\u002Ftrivy:latest\n```\n\n### Step 2: Basic Image Scanning\n\n```bash\n# Scan a public image\ntrivy image python:3.12-slim\n\n# Scan with severity filter\ntrivy image --severity CRITICAL,HIGH nginx:latest\n\n# Ignore unfixed vulnerabilities\ntrivy image --ignore-unfixed alpine:3.19\n\n# Scan local image\ndocker build -t myapp:latest .\ntrivy image myapp:latest\n\n# Scan from tar archive\ndocker save myapp:latest -o myapp.tar\ntrivy image --input myapp.tar\n```\n\n### Step 3: Advanced Scanning Options\n\n```bash\n# All scanners (vuln + misconfig + secret + license)\ntrivy image --scanners vuln,misconfig,secret,license myapp:latest\n\n# Generate SBOM in CycloneDX format\ntrivy image --format cyclonedx --output sbom.cdx.json myapp:latest\n\n# Generate SBOM in SPDX format\ntrivy image --format spdx-json --output sbom.spdx.json myapp:latest\n\n# JSON output for programmatic processing\ntrivy image --format json --output results.json myapp:latest\n\n# SARIF output for GitHub Security tab\ntrivy image --format sarif --output results.sarif myapp:latest\n\n# Template-based output\ntrivy image --format template --template \"@contrib\u002Fhtml.tpl\" --output report.html myapp:latest\n\n# Scan specific layers only\ntrivy image --list-all-pkgs myapp:latest\n```\n\n### Step 4: Scanning Kubernetes Manifests\n\n```bash\n# Scan Dockerfile for misconfigurations\ntrivy config Dockerfile\n\n# Scan Kubernetes manifests\ntrivy config k8s-deployment.yaml\n\n# Scan Helm charts\ntrivy config .\u002Fhelm-chart\u002F\n\n# Scan Terraform files\ntrivy config .\u002Fterraform\u002F\n```\n\n### Step 5: CI\u002FCD Integration\n\n```yaml\n# GitHub Actions\nname: Trivy Container Scan\non: push\n\njobs:\n  scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n\n      - name: Build image\n        run: docker build -t myapp:${{ github.sha }} .\n\n      - name: Run Trivy vulnerability scanner\n        uses: aquasecurity\u002Ftrivy-action@master\n        with:\n          image-ref: myapp:${{ github.sha }}\n          format: sarif\n          output: trivy-results.sarif\n          severity: CRITICAL,HIGH\n          exit-code: 1\n\n      - name: Upload Trivy scan results\n        uses: github\u002Fcodeql-action\u002Fupload-sarif@v3\n        if: always()\n        with:\n          sarif_file: trivy-results.sarif\n\n      - name: Generate SBOM\n        uses: aquasecurity\u002Ftrivy-action@master\n        with:\n          image-ref: myapp:${{ github.sha }}\n          format: cyclonedx\n          output: sbom.cdx.json\n```\n\n```yaml\n# GitLab CI\ntrivy-scan:\n  stage: security\n  image:\n    name: aquasecurity\u002Ftrivy:latest\n    entrypoint: [\"\"]\n  script:\n    - trivy image --exit-code 1 --severity CRITICAL,HIGH\n        --format json --output gl-container-scanning-report.json\n        $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA\n  artifacts:\n    reports:\n      container_scanning: gl-container-scanning-report.json\n```\n\n### Step 6: Policy Enforcement with .trivyignore\n\n```bash\n# .trivyignore - Ignore specific CVEs with expiry\n# Accepted risk: low-impact vulnerability in dev dependency\nCVE-2023-12345 exp:2025-06-01\n\n# False positive: not exploitable in our configuration\nCVE-2024-67890\n\n# Vendor will not fix\nCVE-2023-11111\n```\n\n### Step 7: Scan Private Registry Images\n\n```bash\n# Docker Hub (uses ~\u002F.docker\u002Fconfig.json)\ntrivy image myregistry.azurecr.io\u002Fmyapp:latest\n\n# ECR\naws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin \u003Caccount>.dkr.ecr.us-east-1.amazonaws.com\ntrivy image \u003Caccount>.dkr.ecr.us-east-1.amazonaws.com\u002Fmyapp:latest\n\n# GCR\ntrivy image gcr.io\u002Fmy-project\u002Fmyapp:latest\n\n# With explicit credentials\nTRIVY_USERNAME=user TRIVY_PASSWORD=pass trivy image registry.example.com\u002Fmyapp:latest\n```\n\n## Validation Commands\n\n```bash\n# Verify Trivy installation\ntrivy version\n\n# Update vulnerability database\ntrivy image --download-db-only\n\n# Quick scan with table output\ntrivy image --severity CRITICAL python:3.12\n\n# Verify no CRITICAL vulnerabilities\ntrivy image --exit-code 1 --severity CRITICAL myapp:latest\necho \"Exit code: $?\"  # 0 = no vulns, 1 = vulns found\n```\n\n## References\n\n- [Trivy Documentation](https:\u002F\u002Ftrivy.dev\u002Fdocs\u002F)\n- [Trivy GitHub Repository](https:\u002F\u002Fgithub.com\u002Faquasecurity\u002Ftrivy)\n- [Trivy GitHub Action](https:\u002F\u002Fgithub.com\u002Faquasecurity\u002Ftrivy-action)\n- [Aqua Security - Trivy Scanner Guide](https:\u002F\u002Fwww.aquasec.com\u002Fproducts\u002Ftrivy\u002F)\n",{"name":5,"tags":25,"author":31,"domain":32,"source":33,"license":15,"version":34,"nist_csf":35,"subdomain":40,"description":7,"mitre_attack":41,"source_commit":47},[26,27,28,29,30],"containers","docker","security","trivy","vulnerability-scanning","mahipal","cybersecurity","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills","1.0",[36,37,38,39],"PR.PS-01","PR.IR-01","ID.AM-08","DE.CM-01","container-security",[42,43,44,45,46],"T1610","T1611","T1609","T1525","T1190","04450304b12645cb2b974ab96d28c0664758a88d","main","481dcd7dd2e288b9d627a2bd017db70e64e6c6fa","core\u002Fskills\u002Fscanning-docker-images-with-trivy",2,"https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI","https:\u002F\u002Fyana.vutam.link\u002F","https:\u002F\u002Fgithub.com\u002FHoronomos-laps","https:\u002F\u002Fyana.vutam.link","An open-source governed runtime & execution environment for multi-agent AI systems.","2026-11-14 13:24:09",{"source":8,"skillName":5,"commands":59,"prompt":69,"zipAvailable":70},[60,63,66],{"tool":61,"command":62},"npx","npx skills add Horonomos-laps\u002FYana-AI --skill scanning-docker-images-with-trivy",{"tool":64,"command":65},"bunx","bunx skills add Horonomos-laps\u002FYana-AI --skill scanning-docker-images-with-trivy",{"tool":67,"command":68},"pnpm","pnpm dlx skills add Horonomos-laps\u002FYana-AI --skill scanning-docker-images-with-trivy","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002FSKILL.md",true,[72,78,82,88,92,96,102],{"path":73,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":76,"sourceHtmlUrl":77},"assets\u002Ftemplate.md","ASSET","资产文件",1698,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002Fassets\u002Ftemplate.md",{"path":79,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":81,"sourceHtmlUrl":16},"LICENSE","许可证",11255,{"path":83,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":86,"sourceHtmlUrl":87},"references\u002Fapi-reference.md","REFERENCE","参考文档",1633,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002Freferences\u002Fapi-reference.md",{"path":89,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":90,"sourceHtmlUrl":91},"references\u002Fstandards.md",2517,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002Freferences\u002Fstandards.md",{"path":93,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":94,"sourceHtmlUrl":95},"references\u002Fworkflows.md",3689,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002Freferences\u002Fworkflows.md",{"path":97,"resourceType":98,"resourceTypeDesc":99,"sizeBytes":100,"sourceHtmlUrl":101},"scripts\u002Fagent.py","SCRIPT","脚本",5696,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002Fscripts\u002Fagent.py",{"path":103,"resourceType":98,"resourceTypeDesc":99,"sizeBytes":104,"sourceHtmlUrl":105},"scripts\u002Fprocess.py",10957,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fscanning-docker-images-with-trivy\u002Fscripts\u002Fprocess.py",[107,115,122,130,138,146],{"skillNo":108,"name":109,"nameZh":6,"description":110,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":111,"licenseFileUrl":6,"sourceHtmlUrl":112,"categories":113,"keywords":114,"publishedAt":20},"01M735GKET5YVYKAY62W2P5YXB","openai--sentry--sentry","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.","MIT","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fopenai--sentry--sentry\u002FSKILL.md",[],[],{"skillNo":116,"name":117,"nameZh":6,"description":118,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":119,"categories":120,"keywords":121,"publishedAt":20},"01M73DCAP83T17HY7SMGK7MGFE","ito-basket-compare","Compare Itô prediction-market baskets against a user's knowledge base, portfolio notes, financial context, watchlist, or research thesis. Use for read-only basket comparison and gap analysis without investment advice or live trading.","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fito-basket-compare\u002FSKILL.md",[],[],{"skillNo":123,"name":124,"nameZh":6,"description":125,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":126,"sourceHtmlUrl":127,"categories":128,"keywords":129,"publishedAt":20},"01M734CYEMZFDR3KH6SW0JP8TD","implementing-network-traffic-baselining","Build network traffic baselines from NetFlow\u002FIPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly\u002Fdaily traffic pattern profiling","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FSKILL.md",[],[],{"skillNo":131,"name":132,"nameZh":6,"description":133,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":134,"sourceHtmlUrl":135,"categories":136,"keywords":137,"publishedAt":20},"01M73ASZ6NJRJM44Z2P84NGQ3Q","detecting-evasion-techniques-in-endpoint-logs","Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FSKILL.md",[],[],{"skillNo":139,"name":140,"nameZh":6,"description":141,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":142,"sourceHtmlUrl":143,"categories":144,"keywords":145,"publishedAt":20},"01M734AFNXD06Z78QRK0VKGT7Q","implementing-microsegmentation-with-guardicore","Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FSKILL.md",[],[],{"skillNo":147,"name":148,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":149,"categories":150,"keywords":151,"publishedAt":20},"01M736TK27QMCXK0DVCH25SJN5","ramdisk-tmpfs-patterns","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Framdisk-tmpfs-patterns\u002FSKILL.md",[],[]]