[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M73FPCXJHNQ0MBQFSVN2YCNE":3,"skill-same:01M73FPCXJHNQ0MBQFSVN2YCNE":107},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":16,"sourceHtmlUrl":17,"categories":18,"keywords":19,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":23,"frontMatter":24,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":54,"ownerHtmlUrl":55,"ownerBlogUrl":56,"ownerDescription":57,"updatedAt":58,"install":59,"resources":72},"01M73FPCXJHNQ0MBQFSVN2YCNE","securing-helm-chart-deployments",null,"Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.","Horonomos-laps\u002FYana-AI","Horonomos-laps","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F355299122?v=4","01M76B3QPXE88ET2SQPDPVATZT"," Horonomos-laps","01M72ZQRJPCYPSSWT4D00VJR2A",13,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: securing-helm-chart-deployments\ndescription: Secure Helm chart deployments by validating chart integrity, scanning\n  templates for misconfigurations, and enforcing security contexts in Kubernetes releases.\ndomain: cybersecurity\nsubdomain: container-security\ntags:\n- helm\n- kubernetes\n- chart-security\n- supply-chain\n- configuration-security\n- deployment\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- PR.IR-01\n- ID.AM-08\n- DE.CM-01\nmitre_attack:\n- T1610\n- T1611\n- T1609\n- T1525\n- T1195\nsource: https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\nsource_commit: 04450304b12645cb2b974ab96d28c0664758a88d\n---\n\n# Securing Helm Chart Deployments\n\n## Overview\n\nHelm is the Kubernetes package manager. Securing Helm deployments requires validating chart provenance, scanning templates for security misconfigurations, enforcing pod security contexts, managing secrets securely, and controlling RBAC for Helm operations.\n\n\n## When to Use\n\n- When deploying or configuring securing helm chart deployments capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Helm 3.12+ installed\n- kubectl with cluster access\n- GnuPG for chart signing\u002Fverification\n- kubesec or checkov for template scanning\n\n## Chart Provenance and Integrity\n\n### Sign a Helm Chart\n\n```bash\n# Generate GPG key for signing\ngpg --full-generate-key\n\n# Package and sign chart\nhelm package .\u002Fmychart --sign --key \"helm-signing@example.com\" --keyring ~\u002F.gnupg\u002Fpubring.gpg\n\n# Verify chart signature\nhelm verify mychart-0.1.0.tgz --keyring ~\u002F.gnupg\u002Fpubring.gpg\n```\n\n### Verify Chart Before Install\n\n```bash\n# Verify chart from repository\nhelm pull myrepo\u002Fmychart --verify --keyring \u002Fpath\u002Fto\u002Fkeyring.gpg\n\n# Check chart provenance file\ncat mychart-0.1.0.tgz.prov\n```\n\n## Template Security Scanning\n\n### Render and Scan Templates\n\n```bash\n# Render templates without deploying\nhelm template myrelease .\u002Fmychart --values values-prod.yaml > rendered.yaml\n\n# Scan with kubesec\nkubesec scan rendered.yaml\n\n# Scan with checkov\ncheckov -f rendered.yaml --framework kubernetes\n\n# Scan with trivy\ntrivy config rendered.yaml\n\n# Scan with kube-linter\nkube-linter lint rendered.yaml\n```\n\n### Helm Lint for Misconfigurations\n\n```bash\n# Lint chart\nhelm lint .\u002Fmychart --values values-prod.yaml --strict\n\n# Lint with debug output\nhelm lint .\u002Fmychart --debug\n```\n\n## Security Context Enforcement in values.yaml\n\n```yaml\n# values.yaml - Security hardened defaults\nsecurityContext:\n  runAsNonRoot: true\n  runAsUser: 1000\n  runAsGroup: 3000\n  fsGroup: 2000\n  readOnlyRootFilesystem: true\n  allowPrivilegeEscalation: false\n  capabilities:\n    drop:\n      - ALL\n\npodSecurityContext:\n  seccompProfile:\n    type: RuntimeDefault\n\nresources:\n  limits:\n    cpu: 500m\n    memory: 512Mi\n  requests:\n    cpu: 100m\n    memory: 128Mi\n\nnetworkPolicy:\n  enabled: true\n\nserviceAccount:\n  create: true\n  automountServiceAccountToken: false\n\nimage:\n  pullPolicy: Always\n  # Use digest instead of tag for immutability\n  # tag: \"1.0.0\"\n  # digest: \"sha256:abc123...\"\n```\n\n### Template with Security Contexts\n\n```yaml\n# templates\u002Fdeployment.yaml\napiVersion: apps\u002Fv1\nkind: Deployment\nmetadata:\n  name: {{ include \"mychart.fullname\" . }}\nspec:\n  template:\n    spec:\n      automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}\n      securityContext:\n        {{- toYaml .Values.podSecurityContext | nindent 8 }}\n      containers:\n        - name: {{ .Chart.Name }}\n          securityContext:\n            {{- toYaml .Values.securityContext | nindent 12 }}\n          image: \"{{ .Values.image.repository }}:{{ .Values.image.tag }}\"\n          resources:\n            {{- toYaml .Values.resources | nindent 12 }}\n```\n\n## Secrets Management\n\n### Use External Secrets (Not Helm Values)\n\n```yaml\n# templates\u002Fexternal-secret.yaml\napiVersion: external-secrets.io\u002Fv1beta1\nkind: ExternalSecret\nmetadata:\n  name: {{ include \"mychart.fullname\" . }}-secrets\nspec:\n  refreshInterval: 1h\n  secretStoreRef:\n    name: aws-secretsmanager\n    kind: ClusterSecretStore\n  target:\n    name: {{ include \"mychart.fullname\" . }}-secrets\n  data:\n    - secretKey: db-password\n      remoteRef:\n        key: production\u002Fdatabase\n        property: password\n```\n\n### helm-secrets Plugin\n\n```bash\n# Install helm-secrets plugin\nhelm plugin install https:\u002F\u002Fgithub.com\u002Fjkroepke\u002Fhelm-secrets\n\n# Encrypt values file\nhelm secrets encrypt values-secrets.yaml\n\n# Deploy with encrypted secrets\nhelm secrets install myrelease .\u002Fmychart -f values.yaml -f values-secrets.yaml\n\n# Decrypt for editing\nhelm secrets edit values-secrets.yaml\n```\n\n## RBAC for Helm Operations\n\n```yaml\n# helm-deployer-role.yaml\napiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: Role\nmetadata:\n  name: helm-deployer\n  namespace: production\nrules:\n  - apiGroups: [\"\", \"apps\", \"batch\", \"networking.k8s.io\"]\n    resources: [\"deployments\", \"services\", \"configmaps\", \"secrets\", \"ingresses\", \"jobs\"]\n    verbs: [\"get\", \"list\", \"create\", \"update\", \"patch\", \"delete\"]\n  - apiGroups: [\"\"]\n    resources: [\"pods\", \"pods\u002Flog\"]\n    verbs: [\"get\", \"list\"]\n\n---\napiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: RoleBinding\nmetadata:\n  name: helm-deployer-binding\n  namespace: production\nsubjects:\n  - kind: ServiceAccount\n    name: helm-deployer\n    namespace: production\nroleRef:\n  kind: Role\n  name: helm-deployer\n  apiGroup: rbac.authorization.k8s.io\n```\n\n## CI\u002FCD Helm Security Pipeline\n\n```yaml\n# .github\u002Fworkflows\u002Fhelm-security.yaml\nname: Helm Chart Security\non:\n  pull_request:\n    paths: ['charts\u002F**']\n\njobs:\n  lint-and-scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n\n      - name: Helm lint\n        run: helm lint .\u002Fcharts\u002Fmychart --strict\n\n      - name: Render templates\n        run: helm template test .\u002Fcharts\u002Fmychart -f charts\u002Fmychart\u002Fvalues.yaml > rendered.yaml\n\n      - name: Scan with kube-linter\n        uses: stackrox\u002Fkube-linter-action@v1\n        with:\n          directory: rendered.yaml\n\n      - name: Scan with trivy\n        uses: aquasecurity\u002Ftrivy-action@master\n        with:\n          scan-type: config\n          scan-ref: rendered.yaml\n\n      - name: Scan with checkov\n        uses: bridgecrewio\u002Fcheckov-action@master\n        with:\n          file: rendered.yaml\n          framework: kubernetes\n```\n\n## Best Practices\n\n1. **Sign charts** with GPG and verify before installation\n2. **Render and scan** templates before deploying to catch misconfigurations\n3. **Enforce security contexts** in values.yaml defaults\n4. **Never store secrets** in Helm values - use external secrets or helm-secrets plugin\n5. **Use image digests** instead of tags for immutable references\n6. **Restrict Helm RBAC** to least privilege per namespace\n7. **Pin chart versions** in requirements - never use `latest`\n8. **Lint strictly** in CI with `--strict` flag\n9. **Review third-party charts** before deploying to production\n10. **Use Helm test hooks** to validate deployments post-install\n","# Securing Helm Chart Deployments\n\n## Overview\n\nHelm is the Kubernetes package manager. Securing Helm deployments requires validating chart provenance, scanning templates for security misconfigurations, enforcing pod security contexts, managing secrets securely, and controlling RBAC for Helm operations.\n\n\n## When to Use\n\n- When deploying or configuring securing helm chart deployments capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Helm 3.12+ installed\n- kubectl with cluster access\n- GnuPG for chart signing\u002Fverification\n- kubesec or checkov for template scanning\n\n## Chart Provenance and Integrity\n\n### Sign a Helm Chart\n\n```bash\n# Generate GPG key for signing\ngpg --full-generate-key\n\n# Package and sign chart\nhelm package .\u002Fmychart --sign --key \"helm-signing@example.com\" --keyring ~\u002F.gnupg\u002Fpubring.gpg\n\n# Verify chart signature\nhelm verify mychart-0.1.0.tgz --keyring ~\u002F.gnupg\u002Fpubring.gpg\n```\n\n### Verify Chart Before Install\n\n```bash\n# Verify chart from repository\nhelm pull myrepo\u002Fmychart --verify --keyring \u002Fpath\u002Fto\u002Fkeyring.gpg\n\n# Check chart provenance file\ncat mychart-0.1.0.tgz.prov\n```\n\n## Template Security Scanning\n\n### Render and Scan Templates\n\n```bash\n# Render templates without deploying\nhelm template myrelease .\u002Fmychart --values values-prod.yaml > rendered.yaml\n\n# Scan with kubesec\nkubesec scan rendered.yaml\n\n# Scan with checkov\ncheckov -f rendered.yaml --framework kubernetes\n\n# Scan with trivy\ntrivy config rendered.yaml\n\n# Scan with kube-linter\nkube-linter lint rendered.yaml\n```\n\n### Helm Lint for Misconfigurations\n\n```bash\n# Lint chart\nhelm lint .\u002Fmychart --values values-prod.yaml --strict\n\n# Lint with debug output\nhelm lint .\u002Fmychart --debug\n```\n\n## Security Context Enforcement in values.yaml\n\n```yaml\n# values.yaml - Security hardened defaults\nsecurityContext:\n  runAsNonRoot: true\n  runAsUser: 1000\n  runAsGroup: 3000\n  fsGroup: 2000\n  readOnlyRootFilesystem: true\n  allowPrivilegeEscalation: false\n  capabilities:\n    drop:\n      - ALL\n\npodSecurityContext:\n  seccompProfile:\n    type: RuntimeDefault\n\nresources:\n  limits:\n    cpu: 500m\n    memory: 512Mi\n  requests:\n    cpu: 100m\n    memory: 128Mi\n\nnetworkPolicy:\n  enabled: true\n\nserviceAccount:\n  create: true\n  automountServiceAccountToken: false\n\nimage:\n  pullPolicy: Always\n  # Use digest instead of tag for immutability\n  # tag: \"1.0.0\"\n  # digest: \"sha256:abc123...\"\n```\n\n### Template with Security Contexts\n\n```yaml\n# templates\u002Fdeployment.yaml\napiVersion: apps\u002Fv1\nkind: Deployment\nmetadata:\n  name: {{ include \"mychart.fullname\" . }}\nspec:\n  template:\n    spec:\n      automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}\n      securityContext:\n        {{- toYaml .Values.podSecurityContext | nindent 8 }}\n      containers:\n        - name: {{ .Chart.Name }}\n          securityContext:\n            {{- toYaml .Values.securityContext | nindent 12 }}\n          image: \"{{ .Values.image.repository }}:{{ .Values.image.tag }}\"\n          resources:\n            {{- toYaml .Values.resources | nindent 12 }}\n```\n\n## Secrets Management\n\n### Use External Secrets (Not Helm Values)\n\n```yaml\n# templates\u002Fexternal-secret.yaml\napiVersion: external-secrets.io\u002Fv1beta1\nkind: ExternalSecret\nmetadata:\n  name: {{ include \"mychart.fullname\" . }}-secrets\nspec:\n  refreshInterval: 1h\n  secretStoreRef:\n    name: aws-secretsmanager\n    kind: ClusterSecretStore\n  target:\n    name: {{ include \"mychart.fullname\" . }}-secrets\n  data:\n    - secretKey: db-password\n      remoteRef:\n        key: production\u002Fdatabase\n        property: password\n```\n\n### helm-secrets Plugin\n\n```bash\n# Install helm-secrets plugin\nhelm plugin install https:\u002F\u002Fgithub.com\u002Fjkroepke\u002Fhelm-secrets\n\n# Encrypt values file\nhelm secrets encrypt values-secrets.yaml\n\n# Deploy with encrypted secrets\nhelm secrets install myrelease .\u002Fmychart -f values.yaml -f values-secrets.yaml\n\n# Decrypt for editing\nhelm secrets edit values-secrets.yaml\n```\n\n## RBAC for Helm Operations\n\n```yaml\n# helm-deployer-role.yaml\napiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: Role\nmetadata:\n  name: helm-deployer\n  namespace: production\nrules:\n  - apiGroups: [\"\", \"apps\", \"batch\", \"networking.k8s.io\"]\n    resources: [\"deployments\", \"services\", \"configmaps\", \"secrets\", \"ingresses\", \"jobs\"]\n    verbs: [\"get\", \"list\", \"create\", \"update\", \"patch\", \"delete\"]\n  - apiGroups: [\"\"]\n    resources: [\"pods\", \"pods\u002Flog\"]\n    verbs: [\"get\", \"list\"]\n\n---\napiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: RoleBinding\nmetadata:\n  name: helm-deployer-binding\n  namespace: production\nsubjects:\n  - kind: ServiceAccount\n    name: helm-deployer\n    namespace: production\nroleRef:\n  kind: Role\n  name: helm-deployer\n  apiGroup: rbac.authorization.k8s.io\n```\n\n## CI\u002FCD Helm Security Pipeline\n\n```yaml\n# .github\u002Fworkflows\u002Fhelm-security.yaml\nname: Helm Chart Security\non:\n  pull_request:\n    paths: ['charts\u002F**']\n\njobs:\n  lint-and-scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n\n      - name: Helm lint\n        run: helm lint .\u002Fcharts\u002Fmychart --strict\n\n      - name: Render templates\n        run: helm template test .\u002Fcharts\u002Fmychart -f charts\u002Fmychart\u002Fvalues.yaml > rendered.yaml\n\n      - name: Scan with kube-linter\n        uses: stackrox\u002Fkube-linter-action@v1\n        with:\n          directory: rendered.yaml\n\n      - name: Scan with trivy\n        uses: aquasecurity\u002Ftrivy-action@master\n        with:\n          scan-type: config\n          scan-ref: rendered.yaml\n\n      - name: Scan with checkov\n        uses: bridgecrewio\u002Fcheckov-action@master\n        with:\n          file: rendered.yaml\n          framework: kubernetes\n```\n\n## Best Practices\n\n1. **Sign charts** with GPG and verify before installation\n2. **Render and scan** templates before deploying to catch misconfigurations\n3. **Enforce security contexts** in values.yaml defaults\n4. **Never store secrets** in Helm values - use external secrets or helm-secrets plugin\n5. **Use image digests** instead of tags for immutable references\n6. **Restrict Helm RBAC** to least privilege per namespace\n7. **Pin chart versions** in requirements - never use `latest`\n8. **Lint strictly** in CI with `--strict` flag\n9. **Review third-party charts** before deploying to production\n10. **Use Helm test hooks** to validate deployments post-install\n",{"name":5,"tags":25,"author":32,"domain":33,"source":34,"license":15,"version":35,"nist_csf":36,"subdomain":41,"description":7,"mitre_attack":42,"source_commit":48},[26,27,28,29,30,31],"helm","kubernetes","chart-security","supply-chain","configuration-security","deployment","mahipal","cybersecurity","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills","1.0",[37,38,39,40],"PR.PS-01","PR.IR-01","ID.AM-08","DE.CM-01","container-security",[43,44,45,46,47],"T1610","T1611","T1609","T1525","T1195","04450304b12645cb2b974ab96d28c0664758a88d","main","481dcd7dd2e288b9d627a2bd017db70e64e6c6fa","core\u002Fskills\u002Fsecuring-helm-chart-deployments",1,"https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI","https:\u002F\u002Fyana.vutam.link\u002F","https:\u002F\u002Fgithub.com\u002FHoronomos-laps","https:\u002F\u002Fyana.vutam.link","An open-source governed runtime & execution environment for multi-agent AI systems.","2026-11-11 23:56:26",{"source":8,"skillName":5,"commands":60,"prompt":70,"zipAvailable":71},[61,64,67],{"tool":62,"command":63},"npx","npx skills add Horonomos-laps\u002FYana-AI --skill securing-helm-chart-deployments",{"tool":65,"command":66},"bunx","bunx skills add Horonomos-laps\u002FYana-AI --skill securing-helm-chart-deployments",{"tool":68,"command":69},"pnpm","pnpm dlx skills add Horonomos-laps\u002FYana-AI --skill securing-helm-chart-deployments","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002FSKILL.md",true,[73,79,83,89,93,97,103],{"path":74,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":77,"sourceHtmlUrl":78},"assets\u002Ftemplate.md","ASSET","资产文件",1020,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002Fassets\u002Ftemplate.md",{"path":80,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":16},"LICENSE","许可证",11255,{"path":84,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fapi-reference.md","REFERENCE","参考文档",1981,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002Freferences\u002Fapi-reference.md",{"path":90,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":91,"sourceHtmlUrl":92},"references\u002Fstandards.md",1329,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002Freferences\u002Fstandards.md",{"path":94,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":95,"sourceHtmlUrl":96},"references\u002Fworkflows.md",1093,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002Freferences\u002Fworkflows.md",{"path":98,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":101,"sourceHtmlUrl":102},"scripts\u002Fagent.py","SCRIPT","脚本",6768,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002Fscripts\u002Fagent.py",{"path":104,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":105,"sourceHtmlUrl":106},"scripts\u002Fprocess.py",6347,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fsecuring-helm-chart-deployments\u002Fscripts\u002Fprocess.py",[108,116,123,131,139,147],{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":112,"licenseFileUrl":6,"sourceHtmlUrl":113,"categories":114,"keywords":115,"publishedAt":20},"01M735GKET5YVYKAY62W2P5YXB","openai--sentry--sentry","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.","MIT","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fopenai--sentry--sentry\u002FSKILL.md",[],[],{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":122,"publishedAt":20},"01M73DCAP83T17HY7SMGK7MGFE","ito-basket-compare","Compare Itô prediction-market baskets against a user's knowledge base, portfolio notes, financial context, watchlist, or research thesis. Use for read-only basket comparison and gap analysis without investment advice or live trading.","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fito-basket-compare\u002FSKILL.md",[],[],{"skillNo":124,"name":125,"nameZh":6,"description":126,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":127,"sourceHtmlUrl":128,"categories":129,"keywords":130,"publishedAt":20},"01M734CYEMZFDR3KH6SW0JP8TD","implementing-network-traffic-baselining","Build network traffic baselines from NetFlow\u002FIPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly\u002Fdaily traffic pattern profiling","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FSKILL.md",[],[],{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":135,"sourceHtmlUrl":136,"categories":137,"keywords":138,"publishedAt":20},"01M73ASZ6NJRJM44Z2P84NGQ3Q","detecting-evasion-techniques-in-endpoint-logs","Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FSKILL.md",[],[],{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":143,"sourceHtmlUrl":144,"categories":145,"keywords":146,"publishedAt":20},"01M734AFNXD06Z78QRK0VKGT7Q","implementing-microsegmentation-with-guardicore","Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FSKILL.md",[],[],{"skillNo":148,"name":149,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":150,"categories":151,"keywords":152,"publishedAt":20},"01M736TK27QMCXK0DVCH25SJN5","ramdisk-tmpfs-patterns","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Framdisk-tmpfs-patterns\u002FSKILL.md",[],[]]