[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M73FP1TSP946F0021SNT7VJB":3,"skill-same:01M73FP1TSP946F0021SNT7VJB":107},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":16,"sourceHtmlUrl":17,"categories":18,"keywords":19,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":23,"frontMatter":24,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":54,"ownerHtmlUrl":55,"ownerBlogUrl":56,"ownerDescription":57,"updatedAt":58,"install":59,"resources":72},"01M73FP1TSP946F0021SNT7VJB","securing-container-registry-with-harbor",null,"Harbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary\u002FCosign), RBAC, content trust policies, replicatio","Horonomos-laps\u002FYana-AI","Horonomos-laps","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F355299122?v=4","01M76B3QPXE88ET2SQPDPVATZT"," Horonomos-laps","01M72ZQRJPCYPSSWT4D00VJR2A",13,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: securing-container-registry-with-harbor\ndescription: Harbor is an open-source container registry that provides security features\n  including vulnerability scanning (integrated Trivy), image signing (Notary\u002FCosign),\n  RBAC, content trust policies, replicatio\ndomain: cybersecurity\nsubdomain: container-security\ntags:\n- containers\n- kubernetes\n- docker\n- security\n- registry\n- harbor\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- PR.IR-01\n- ID.AM-08\n- DE.CM-01\nmitre_attack:\n- T1610\n- T1611\n- T1609\n- T1525\n- T1190\nsource: https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\nsource_commit: 04450304b12645cb2b974ab96d28c0664758a88d\n---\n# Securing Container Registry with Harbor\n\n## Overview\n\nHarbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary\u002FCosign), RBAC, content trust policies, replication, and audit logging. Securing Harbor involves configuring these features to enforce image provenance, prevent vulnerable image deployment, and maintain registry access control.\n\n\n## When to Use\n\n- When deploying or configuring securing container registry with harbor capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Harbor 2.10+ installed (Helm or Docker Compose)\n- TLS certificates for HTTPS\n- Trivy scanner integration\n- OIDC\u002FLDAP for authentication\n- Kubernetes cluster (for deployment target)\n\n## Workflow\n\n### Step 1: Install Harbor with Security Configuration\n\n```yaml\n# harbor-values.yaml for Helm deployment\nexpose:\n  type: ingress\n  tls:\n    enabled: true\n    certSource: secret\n    secret:\n      secretName: harbor-tls\n      notarySecretName: harbor-tls\n  ingress:\n    hosts:\n      core: harbor.example.com\n      notary: notary.example.com\n\nexternalURL: https:\u002F\u002Fharbor.example.com\n\npersistence:\n  enabled: true\n  resourcePolicy: \"keep\"\n\nharborAdminPassword: \"\u003Cstrong-password>\"\n\ntrivy:\n  enabled: true\n  gitHubToken: \"\u003Cgithub-token>\"\n  severity: \"CRITICAL,HIGH,MEDIUM\"\n  autoScan: true\n\nnotary:\n  enabled: true\n\ncore:\n  secretKey: \"\u003C32-char-secret>\"\n\ndatabase:\n  type: external\n  external:\n    host: postgres.example.com\n    port: \"5432\"\n    username: harbor\n    password: \"\u003Cdb-password>\"\n    sslmode: require\n```\n\n```bash\nhelm repo add harbor https:\u002F\u002Fhelm.getharbor.io\nhelm install harbor harbor\u002Fharbor -f harbor-values.yaml -n harbor --create-namespace\n```\n\n### Step 2: Configure Vulnerability Scanning Policies\n\n```bash\n# Enable auto-scan on push (via Harbor API)\ncurl -k -X PUT \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fmyproject\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"metadata\": {\n      \"auto_scan\": \"true\",\n      \"severity\": \"critical\",\n      \"prevent_vul\": \"true\",\n      \"reuse_sys_cve_allowlist\": \"true\"\n    }\n  }'\n```\n\n### Step 3: Configure Content Trust\n\n```bash\n# Enable content trust at project level\ncurl -k -X PUT \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fmyproject\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"metadata\": {\n      \"enable_content_trust\": \"true\",\n      \"enable_content_trust_cosign\": \"true\"\n    }\n  }'\n\n# Sign image with Cosign\ncosign sign --key cosign.key harbor.example.com\u002Fmyproject\u002Fmyapp:v1.0.0\n\n# Verify signature\ncosign verify --key cosign.pub harbor.example.com\u002Fmyproject\u002Fmyapp:v1.0.0\n```\n\n### Step 4: Configure RBAC and Project Isolation\n\n```bash\n# Create project with private visibility\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"project_name\": \"production\",\n    \"metadata\": {\n      \"public\": \"false\",\n      \"auto_scan\": \"true\",\n      \"prevent_vul\": \"true\",\n      \"severity\": \"high\"\n    }\n  }'\n\n# Harbor roles: ProjectAdmin, Maintainer, Developer, Guest, LimitedGuest\n# Add member with specific role\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fproduction\u002Fmembers\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"role_id\": 3,\n    \"member_user\": {\"username\": \"developer1\"}\n  }'\n```\n\n### Step 5: Configure Immutable Tags and Retention\n\n```bash\n# Create tag immutability rule (prevent overwriting release tags)\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fproduction\u002Fimmutabletagrules\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"tag_filter\": \"v*\",\n    \"scope_selectors\": {\n      \"repository\": [{\"kind\": \"doublestar\", \"decoration\": \"repoMatches\", \"pattern\": \"**\"}]\n    }\n  }'\n\n# Configure retention policy (keep last 10 tags, delete untagged after 7 days)\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fretentions\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"algorithm\": \"or\",\n    \"rules\": [\n      {\n        \"action\": \"retain\",\n        \"template\": \"latestPushedK\",\n        \"params\": {\"latestPushedK\": 10},\n        \"tag_selectors\": [{\"kind\": \"doublestar\", \"decoration\": \"matches\", \"pattern\": \"**\"}],\n        \"scope_selectors\": {\"repository\": [{\"kind\": \"doublestar\", \"decoration\": \"repoMatches\", \"pattern\": \"**\"}]}\n      }\n    ],\n    \"trigger\": {\"kind\": \"Schedule\", \"settings\": {\"cron\": \"0 0 * * *\"}}\n  }'\n```\n\n### Step 6: OIDC Authentication Integration\n\n```yaml\n# Harbor configuration for OIDC\nauth_mode: oidc_auth\noidc_name: \"Okta\"\noidc_endpoint: \"https:\u002F\u002Fcompany.okta.com\u002Foauth2\u002Fdefault\"\noidc_client_id: \"harbor-client-id\"\noidc_client_secret: \"harbor-client-secret\"\noidc_groups_claim: \"groups\"\noidc_admin_group: \"harbor-admins\"\noidc_scope: \"openid,profile,email,groups\"\noidc_verify_cert: true\noidc_auto_onboard: true\n```\n\n## Validation Commands\n\n```bash\n# Test vulnerability prevention (should block pull of vulnerable image)\ndocker pull harbor.example.com\u002Fproduction\u002Fvulnerable-app:latest\n# Expected: Error - image blocked due to vulnerabilities\n\n# Verify content trust enforcement\nDOCKER_CONTENT_TRUST=0 docker push harbor.example.com\u002Fproduction\u002Funsigned:latest\n# Expected: Push rejected due to content trust policy\n\n# Check scan results via API\ncurl -k \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fproduction\u002Frepositories\u002Fmyapp\u002Fartifacts\u002Fv1.0.0\u002Fadditions\u002Fvulnerabilities\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\"\n\n# Audit log check\ncurl -k \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Faudit-logs?page=1&page_size=10\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\"\n```\n\n## References\n\n- [Harbor Documentation](https:\u002F\u002Fgoharbor.io\u002Fdocs\u002F)\n- [Harbor Security Best Practices](https:\u002F\u002Fgoharbor.io\u002Fdocs\u002F2.10.0\u002Fadministration\u002Fvulnerability-scanning\u002F)\n- [Harbor GitHub Repository](https:\u002F\u002Fgithub.com\u002Fgoharbor\u002Fharbor)\n","# Securing Container Registry with Harbor\n\n## Overview\n\nHarbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary\u002FCosign), RBAC, content trust policies, replication, and audit logging. Securing Harbor involves configuring these features to enforce image provenance, prevent vulnerable image deployment, and maintain registry access control.\n\n\n## When to Use\n\n- When deploying or configuring securing container registry with harbor capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Harbor 2.10+ installed (Helm or Docker Compose)\n- TLS certificates for HTTPS\n- Trivy scanner integration\n- OIDC\u002FLDAP for authentication\n- Kubernetes cluster (for deployment target)\n\n## Workflow\n\n### Step 1: Install Harbor with Security Configuration\n\n```yaml\n# harbor-values.yaml for Helm deployment\nexpose:\n  type: ingress\n  tls:\n    enabled: true\n    certSource: secret\n    secret:\n      secretName: harbor-tls\n      notarySecretName: harbor-tls\n  ingress:\n    hosts:\n      core: harbor.example.com\n      notary: notary.example.com\n\nexternalURL: https:\u002F\u002Fharbor.example.com\n\npersistence:\n  enabled: true\n  resourcePolicy: \"keep\"\n\nharborAdminPassword: \"\u003Cstrong-password>\"\n\ntrivy:\n  enabled: true\n  gitHubToken: \"\u003Cgithub-token>\"\n  severity: \"CRITICAL,HIGH,MEDIUM\"\n  autoScan: true\n\nnotary:\n  enabled: true\n\ncore:\n  secretKey: \"\u003C32-char-secret>\"\n\ndatabase:\n  type: external\n  external:\n    host: postgres.example.com\n    port: \"5432\"\n    username: harbor\n    password: \"\u003Cdb-password>\"\n    sslmode: require\n```\n\n```bash\nhelm repo add harbor https:\u002F\u002Fhelm.getharbor.io\nhelm install harbor harbor\u002Fharbor -f harbor-values.yaml -n harbor --create-namespace\n```\n\n### Step 2: Configure Vulnerability Scanning Policies\n\n```bash\n# Enable auto-scan on push (via Harbor API)\ncurl -k -X PUT \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fmyproject\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"metadata\": {\n      \"auto_scan\": \"true\",\n      \"severity\": \"critical\",\n      \"prevent_vul\": \"true\",\n      \"reuse_sys_cve_allowlist\": \"true\"\n    }\n  }'\n```\n\n### Step 3: Configure Content Trust\n\n```bash\n# Enable content trust at project level\ncurl -k -X PUT \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fmyproject\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"metadata\": {\n      \"enable_content_trust\": \"true\",\n      \"enable_content_trust_cosign\": \"true\"\n    }\n  }'\n\n# Sign image with Cosign\ncosign sign --key cosign.key harbor.example.com\u002Fmyproject\u002Fmyapp:v1.0.0\n\n# Verify signature\ncosign verify --key cosign.pub harbor.example.com\u002Fmyproject\u002Fmyapp:v1.0.0\n```\n\n### Step 4: Configure RBAC and Project Isolation\n\n```bash\n# Create project with private visibility\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"project_name\": \"production\",\n    \"metadata\": {\n      \"public\": \"false\",\n      \"auto_scan\": \"true\",\n      \"prevent_vul\": \"true\",\n      \"severity\": \"high\"\n    }\n  }'\n\n# Harbor roles: ProjectAdmin, Maintainer, Developer, Guest, LimitedGuest\n# Add member with specific role\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fproduction\u002Fmembers\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"role_id\": 3,\n    \"member_user\": {\"username\": \"developer1\"}\n  }'\n```\n\n### Step 5: Configure Immutable Tags and Retention\n\n```bash\n# Create tag immutability rule (prevent overwriting release tags)\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fproduction\u002Fimmutabletagrules\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"tag_filter\": \"v*\",\n    \"scope_selectors\": {\n      \"repository\": [{\"kind\": \"doublestar\", \"decoration\": \"repoMatches\", \"pattern\": \"**\"}]\n    }\n  }'\n\n# Configure retention policy (keep last 10 tags, delete untagged after 7 days)\ncurl -k -X POST \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fretentions\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\" \\\n  -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\n    \"algorithm\": \"or\",\n    \"rules\": [\n      {\n        \"action\": \"retain\",\n        \"template\": \"latestPushedK\",\n        \"params\": {\"latestPushedK\": 10},\n        \"tag_selectors\": [{\"kind\": \"doublestar\", \"decoration\": \"matches\", \"pattern\": \"**\"}],\n        \"scope_selectors\": {\"repository\": [{\"kind\": \"doublestar\", \"decoration\": \"repoMatches\", \"pattern\": \"**\"}]}\n      }\n    ],\n    \"trigger\": {\"kind\": \"Schedule\", \"settings\": {\"cron\": \"0 0 * * *\"}}\n  }'\n```\n\n### Step 6: OIDC Authentication Integration\n\n```yaml\n# Harbor configuration for OIDC\nauth_mode: oidc_auth\noidc_name: \"Okta\"\noidc_endpoint: \"https:\u002F\u002Fcompany.okta.com\u002Foauth2\u002Fdefault\"\noidc_client_id: \"harbor-client-id\"\noidc_client_secret: \"harbor-client-secret\"\noidc_groups_claim: \"groups\"\noidc_admin_group: \"harbor-admins\"\noidc_scope: \"openid,profile,email,groups\"\noidc_verify_cert: true\noidc_auto_onboard: true\n```\n\n## Validation Commands\n\n```bash\n# Test vulnerability prevention (should block pull of vulnerable image)\ndocker pull harbor.example.com\u002Fproduction\u002Fvulnerable-app:latest\n# Expected: Error - image blocked due to vulnerabilities\n\n# Verify content trust enforcement\nDOCKER_CONTENT_TRUST=0 docker push harbor.example.com\u002Fproduction\u002Funsigned:latest\n# Expected: Push rejected due to content trust policy\n\n# Check scan results via API\ncurl -k \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Fprojects\u002Fproduction\u002Frepositories\u002Fmyapp\u002Fartifacts\u002Fv1.0.0\u002Fadditions\u002Fvulnerabilities\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\"\n\n# Audit log check\ncurl -k \"https:\u002F\u002Fharbor.example.com\u002Fapi\u002Fv2.0\u002Faudit-logs?page=1&page_size=10\" \\\n  -H \"Authorization: Basic $(echo -n admin:Harbor12345 | base64)\"\n```\n\n## References\n\n- [Harbor Documentation](https:\u002F\u002Fgoharbor.io\u002Fdocs\u002F)\n- [Harbor Security Best Practices](https:\u002F\u002Fgoharbor.io\u002Fdocs\u002F2.10.0\u002Fadministration\u002Fvulnerability-scanning\u002F)\n- [Harbor GitHub Repository](https:\u002F\u002Fgithub.com\u002Fgoharbor\u002Fharbor)\n",{"name":5,"tags":25,"author":32,"domain":33,"source":34,"license":15,"version":35,"nist_csf":36,"subdomain":41,"description":7,"mitre_attack":42,"source_commit":48},[26,27,28,29,30,31],"containers","kubernetes","docker","security","registry","harbor","mahipal","cybersecurity","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills","1.0",[37,38,39,40],"PR.PS-01","PR.IR-01","ID.AM-08","DE.CM-01","container-security",[43,44,45,46,47],"T1610","T1611","T1609","T1525","T1190","04450304b12645cb2b974ab96d28c0664758a88d","main","481dcd7dd2e288b9d627a2bd017db70e64e6c6fa","core\u002Fskills\u002Fsecuring-container-registry-with-harbor",2,"https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI","https:\u002F\u002Fyana.vutam.link\u002F","https:\u002F\u002Fgithub.com\u002FHoronomos-laps","https:\u002F\u002Fyana.vutam.link","An open-source governed runtime & execution environment for multi-agent AI systems.","2026-11-13 13:15:29",{"source":8,"skillName":5,"commands":60,"prompt":70,"zipAvailable":71},[61,64,67],{"tool":62,"command":63},"npx","npx skills add Horonomos-laps\u002FYana-AI --skill securing-container-registry-with-harbor",{"tool":65,"command":66},"bunx","bunx skills add Horonomos-laps\u002FYana-AI --skill securing-container-registry-with-harbor",{"tool":68,"command":69},"pnpm","pnpm dlx skills add Horonomos-laps\u002FYana-AI --skill securing-container-registry-with-harbor","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002FSKILL.md",true,[73,79,83,89,93,97,103],{"path":74,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":77,"sourceHtmlUrl":78},"assets\u002Ftemplate.md","ASSET","资产文件",549,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002Fassets\u002Ftemplate.md",{"path":80,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":16},"LICENSE","许可证",11255,{"path":84,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fapi-reference.md","REFERENCE","参考文档",1900,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002Freferences\u002Fapi-reference.md",{"path":90,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":91,"sourceHtmlUrl":92},"references\u002Fstandards.md",1107,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002Freferences\u002Fstandards.md",{"path":94,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":95,"sourceHtmlUrl":96},"references\u002Fworkflows.md",983,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002Freferences\u002Fworkflows.md",{"path":98,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":101,"sourceHtmlUrl":102},"scripts\u002Fagent.py","SCRIPT","脚本",6843,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002Fscripts\u002Fagent.py",{"path":104,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":105,"sourceHtmlUrl":106},"scripts\u002Fprocess.py",6661,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002Fscripts\u002Fprocess.py",[108,116,123,131,139,147],{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":112,"licenseFileUrl":6,"sourceHtmlUrl":113,"categories":114,"keywords":115,"publishedAt":20},"01M735GKET5YVYKAY62W2P5YXB","openai--sentry--sentry","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.","MIT","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fopenai--sentry--sentry\u002FSKILL.md",[],[],{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":122,"publishedAt":20},"01M73DCAP83T17HY7SMGK7MGFE","ito-basket-compare","Compare Itô prediction-market baskets against a user's knowledge base, portfolio notes, financial context, watchlist, or research thesis. Use for read-only basket comparison and gap analysis without investment advice or live trading.","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fito-basket-compare\u002FSKILL.md",[],[],{"skillNo":124,"name":125,"nameZh":6,"description":126,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":127,"sourceHtmlUrl":128,"categories":129,"keywords":130,"publishedAt":20},"01M734CYEMZFDR3KH6SW0JP8TD","implementing-network-traffic-baselining","Build network traffic baselines from NetFlow\u002FIPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly\u002Fdaily traffic pattern profiling","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FSKILL.md",[],[],{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":135,"sourceHtmlUrl":136,"categories":137,"keywords":138,"publishedAt":20},"01M73ASZ6NJRJM44Z2P84NGQ3Q","detecting-evasion-techniques-in-endpoint-logs","Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FSKILL.md",[],[],{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":143,"sourceHtmlUrl":144,"categories":145,"keywords":146,"publishedAt":20},"01M734AFNXD06Z78QRK0VKGT7Q","implementing-microsegmentation-with-guardicore","Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FSKILL.md",[],[],{"skillNo":148,"name":149,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":150,"categories":151,"keywords":152,"publishedAt":20},"01M736TK27QMCXK0DVCH25SJN5","ramdisk-tmpfs-patterns","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Framdisk-tmpfs-patterns\u002FSKILL.md",[],[]]