[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M755K2NAJXY7CWC5R9T9YANP":3,"skill-same:01M755K2NAJXY7CWC5R9T9YANP":92},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":16,"sourceHtmlUrl":17,"categories":18,"keywords":19,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":23,"frontMatter":24,"refName":38,"commitSha":39,"skillDirectory":5,"forksCount":14,"repositoryHtmlUrl":40,"repositoryHomepageUrl":6,"ownerHtmlUrl":41,"ownerBlogUrl":42,"ownerDescription":6,"updatedAt":43,"install":44,"resources":57},"01M755K2NAJXY7CWC5R9T9YANP","performing-kubernetes-etcd-security-assessment",null,"Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.","SamuelChien\u002Fmega-skills-collection","SamuelChien","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F4652114?v=4","01M74KK34WVHA0P5ZYSJRDDFMG","Samuel Chien","01M74KK35FQN1N9VZ9EPTH3P2S",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002FSKILL.md",[],[],"2026-11-12 13:55:43",false,"---\nname: performing-kubernetes-etcd-security-assessment\ndescription: Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.\ndomain: cybersecurity\nsubdomain: container-security\ntags: [kubernetes, etcd, encryption, tls, security-assessment, backup, secrets, control-plane]\nversion: \"1.0\"\nauthor: mahipal\nlicense: Apache-2.0\n---\n\n# Performing Kubernetes etcd Security Assessment\n\n## Overview\n\netcd is the distributed key-value store that serves as Kubernetes' backing store for all cluster data, including Secrets, RBAC policies, ConfigMaps, and workload configurations. Without proper hardening, etcd exposes all cluster secrets in plaintext, making it the highest-value target for attackers who gain control plane access. A comprehensive security assessment covers encryption at rest, TLS for transport, access control, backup security, and network isolation.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing kubernetes etcd security assessment\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Access to Kubernetes control plane nodes\n- SSH access to etcd cluster nodes (or etcdctl configured)\n- CIS Kubernetes Benchmark reference document\n- Understanding of TLS certificate management and EncryptionConfiguration\n\n## Assessment Areas\n\n### 1. Encryption at Rest\n\nVerify that Kubernetes encrypts Secret data stored in etcd:\n\n```bash\n# Check if EncryptionConfiguration is configured on API server\nps aux | grep kube-apiserver | grep encryption-provider-config\n\n# View the encryption configuration\ncat \u002Fetc\u002Fkubernetes\u002Fenc\u002Fencryption-config.yaml\n```\n\nExpected secure configuration:\n\n```yaml\napiVersion: apiserver.config.k8s.io\u002Fv1\nkind: EncryptionConfiguration\nresources:\n  - resources:\n      - secrets\n      - configmaps\n    providers:\n      - aescbc:\n          keys:\n            - name: key1\n              secret: \u003Cbase64-encoded-32-byte-key>\n      - identity: {}  # Fallback for reading unencrypted data\n```\n\nVerify secrets are actually encrypted in etcd:\n\n```bash\n# Read a secret directly from etcd\nETCDCTL_API=3 etcdctl \\\n  --endpoints=https:\u002F\u002F127.0.0.1:2379 \\\n  --cacert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fca.crt \\\n  --cert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt \\\n  --key=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.key \\\n  get \u002Fregistry\u002Fsecrets\u002Fdefault\u002Fmy-secret | hexdump -C | head -20\n\n# If encrypted, output starts with \"k8s:enc:aescbc:v1:key1\"\n# If NOT encrypted, you'll see plaintext key-value pairs\n```\n\n### 2. TLS Transport Security\n\n```bash\n# Verify etcd uses TLS for client connections\nETCDCTL_API=3 etcdctl endpoint health \\\n  --endpoints=https:\u002F\u002F127.0.0.1:2379 \\\n  --cacert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fca.crt \\\n  --cert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt \\\n  --key=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.key\n\n# Check peer TLS configuration\nps aux | grep etcd | tr ' ' '\\n' | grep -E \"peer-cert|peer-key|peer-trusted-ca\"\n\n# Verify certificate expiration\nopenssl x509 -in \u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt -noout -enddate\nopenssl x509 -in \u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fpeer.crt -noout -enddate\n```\n\nExpected flags:\n\n| Flag | Required Value | Purpose |\n|------|---------------|---------|\n| `--cert-file` | Path to server cert | Client-to-server TLS |\n| `--key-file` | Path to server key | Client-to-server TLS |\n| `--trusted-ca-file` | Path to CA cert | Client certificate validation |\n| `--peer-cert-file` | Path to peer cert | Peer-to-peer TLS |\n| `--peer-key-file` | Path to peer key | Peer-to-peer TLS |\n| `--peer-trusted-ca-file` | Path to peer CA | Peer certificate validation |\n| `--client-cert-auth` | true | Require client certificates |\n| `--peer-client-cert-auth` | true | Require peer certificates |\n\n### 3. Access Control\n\n```bash\n# Verify etcd is not exposed on all interfaces\nps aux | grep etcd | tr ' ' '\\n' | grep listen-client-urls\n# Should be: https:\u002F\u002F127.0.0.1:2379 (not 0.0.0.0)\n\n# Check who can access etcd certificates\nls -la \u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002F\n# Should be readable only by root\u002Fetcd user\n\n# Verify API server is the only etcd client\nss -tlnp | grep 2379\n# Only kube-apiserver should have connections\n```\n\n### 4. Backup Security\n\n```bash\n# Create an encrypted etcd backup\nETCDCTL_API=3 etcdctl snapshot save \u002Fbackup\u002Fetcd-snapshot.db \\\n  --endpoints=https:\u002F\u002F127.0.0.1:2379 \\\n  --cacert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fca.crt \\\n  --cert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt \\\n  --key=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.key\n\n# Encrypt the backup file\ngpg --symmetric --cipher-algo AES256 \u002Fbackup\u002Fetcd-snapshot.db\n\n# Verify backup integrity\nETCDCTL_API=3 etcdctl snapshot status \u002Fbackup\u002Fetcd-snapshot.db --write-out=table\n```\n\n### 5. Network Isolation\n\n```bash\n# Verify etcd ports are firewalled\niptables -L -n | grep -E \"2379|2380\"\n\n# Check if etcd is accessible from worker nodes (should NOT be)\n# Run from a worker node:\ncurl -k https:\u002F\u002F\u003Ccontrol-plane-ip>:2379\u002Fhealth\n# Should be rejected\u002Ftimeout\n```\n\n## CIS Benchmark Checks\n\n| CIS Control | Check | Expected Result |\n|-------------|-------|----------------|\n| 2.1 | etcd cert-file set | TLS certificate configured |\n| 2.2 | etcd client-cert-auth | Client certificate authentication enabled |\n| 2.3 | etcd auto-tls disabled | auto-tls=false |\n| 2.4 | etcd peer cert-file set | Peer TLS configured |\n| 2.5 | etcd peer client-cert-auth | Peer authentication enabled |\n| 2.6 | etcd peer auto-tls disabled | peer-auto-tls=false |\n| 2.7 | etcd unique CA | Separate CA for etcd (not shared with cluster) |\n\n## Key Rotation Procedure\n\n```bash\n# 1. Generate new encryption key\nNEW_KEY=$(head -c 32 \u002Fdev\u002Furandom | base64)\n\n# 2. Update EncryptionConfiguration with new key first\ncat > \u002Fetc\u002Fkubernetes\u002Fenc\u002Fencryption-config.yaml \u003C\u003CEOF\napiVersion: apiserver.config.k8s.io\u002Fv1\nkind: EncryptionConfiguration\nresources:\n  - resources:\n      - secrets\n    providers:\n      - aescbc:\n          keys:\n            - name: key2\n              secret: ${NEW_KEY}\n            - name: key1\n              secret: \u003Cold-key>\n      - identity: {}\nEOF\n\n# 3. Restart API server to pick up new config\n# 4. Re-encrypt all secrets with new key\nkubectl get secrets --all-namespaces -o json | \\\n  kubectl replace -f -\n\n# 5. Remove old key from EncryptionConfiguration\n# 6. Restart API server again\n```\n\n## References\n\n- [Kubernetes etcd Encryption Documentation](https:\u002F\u002Fkubernetes.io\u002Fdocs\u002Ftasks\u002Fadminister-cluster\u002Fencrypt-data\u002F)\n- [CIS Kubernetes Benchmark - etcd Controls](https:\u002F\u002Fwww.cisecurity.org\u002Fbenchmark\u002Fkubernetes)\n- [Securing etcd - K8s Security Guide](https:\u002F\u002Fk8s-security.geek-kb.com\u002Fdocs\u002Fbest_practices\u002Fcluster_setup_and_hardening\u002Fcontrol_plane_security\u002Fetcd_security_mitigation\u002F)\n- [Infosec: Encryption and etcd](https:\u002F\u002Fwww.infosecinstitute.com\u002Fresources\u002Fcryptography\u002Fencryption-and-etcd-the-key-to-securing-kubernetes\u002F)\n","# Performing Kubernetes etcd Security Assessment\n\n## Overview\n\netcd is the distributed key-value store that serves as Kubernetes' backing store for all cluster data, including Secrets, RBAC policies, ConfigMaps, and workload configurations. Without proper hardening, etcd exposes all cluster secrets in plaintext, making it the highest-value target for attackers who gain control plane access. A comprehensive security assessment covers encryption at rest, TLS for transport, access control, backup security, and network isolation.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing kubernetes etcd security assessment\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Access to Kubernetes control plane nodes\n- SSH access to etcd cluster nodes (or etcdctl configured)\n- CIS Kubernetes Benchmark reference document\n- Understanding of TLS certificate management and EncryptionConfiguration\n\n## Assessment Areas\n\n### 1. Encryption at Rest\n\nVerify that Kubernetes encrypts Secret data stored in etcd:\n\n```bash\n# Check if EncryptionConfiguration is configured on API server\nps aux | grep kube-apiserver | grep encryption-provider-config\n\n# View the encryption configuration\ncat \u002Fetc\u002Fkubernetes\u002Fenc\u002Fencryption-config.yaml\n```\n\nExpected secure configuration:\n\n```yaml\napiVersion: apiserver.config.k8s.io\u002Fv1\nkind: EncryptionConfiguration\nresources:\n  - resources:\n      - secrets\n      - configmaps\n    providers:\n      - aescbc:\n          keys:\n            - name: key1\n              secret: \u003Cbase64-encoded-32-byte-key>\n      - identity: {}  # Fallback for reading unencrypted data\n```\n\nVerify secrets are actually encrypted in etcd:\n\n```bash\n# Read a secret directly from etcd\nETCDCTL_API=3 etcdctl \\\n  --endpoints=https:\u002F\u002F127.0.0.1:2379 \\\n  --cacert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fca.crt \\\n  --cert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt \\\n  --key=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.key \\\n  get \u002Fregistry\u002Fsecrets\u002Fdefault\u002Fmy-secret | hexdump -C | head -20\n\n# If encrypted, output starts with \"k8s:enc:aescbc:v1:key1\"\n# If NOT encrypted, you'll see plaintext key-value pairs\n```\n\n### 2. TLS Transport Security\n\n```bash\n# Verify etcd uses TLS for client connections\nETCDCTL_API=3 etcdctl endpoint health \\\n  --endpoints=https:\u002F\u002F127.0.0.1:2379 \\\n  --cacert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fca.crt \\\n  --cert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt \\\n  --key=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.key\n\n# Check peer TLS configuration\nps aux | grep etcd | tr ' ' '\\n' | grep -E \"peer-cert|peer-key|peer-trusted-ca\"\n\n# Verify certificate expiration\nopenssl x509 -in \u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt -noout -enddate\nopenssl x509 -in \u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fpeer.crt -noout -enddate\n```\n\nExpected flags:\n\n| Flag | Required Value | Purpose |\n|------|---------------|---------|\n| `--cert-file` | Path to server cert | Client-to-server TLS |\n| `--key-file` | Path to server key | Client-to-server TLS |\n| `--trusted-ca-file` | Path to CA cert | Client certificate validation |\n| `--peer-cert-file` | Path to peer cert | Peer-to-peer TLS |\n| `--peer-key-file` | Path to peer key | Peer-to-peer TLS |\n| `--peer-trusted-ca-file` | Path to peer CA | Peer certificate validation |\n| `--client-cert-auth` | true | Require client certificates |\n| `--peer-client-cert-auth` | true | Require peer certificates |\n\n### 3. Access Control\n\n```bash\n# Verify etcd is not exposed on all interfaces\nps aux | grep etcd | tr ' ' '\\n' | grep listen-client-urls\n# Should be: https:\u002F\u002F127.0.0.1:2379 (not 0.0.0.0)\n\n# Check who can access etcd certificates\nls -la \u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002F\n# Should be readable only by root\u002Fetcd user\n\n# Verify API server is the only etcd client\nss -tlnp | grep 2379\n# Only kube-apiserver should have connections\n```\n\n### 4. Backup Security\n\n```bash\n# Create an encrypted etcd backup\nETCDCTL_API=3 etcdctl snapshot save \u002Fbackup\u002Fetcd-snapshot.db \\\n  --endpoints=https:\u002F\u002F127.0.0.1:2379 \\\n  --cacert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fca.crt \\\n  --cert=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.crt \\\n  --key=\u002Fetc\u002Fkubernetes\u002Fpki\u002Fetcd\u002Fserver.key\n\n# Encrypt the backup file\ngpg --symmetric --cipher-algo AES256 \u002Fbackup\u002Fetcd-snapshot.db\n\n# Verify backup integrity\nETCDCTL_API=3 etcdctl snapshot status \u002Fbackup\u002Fetcd-snapshot.db --write-out=table\n```\n\n### 5. Network Isolation\n\n```bash\n# Verify etcd ports are firewalled\niptables -L -n | grep -E \"2379|2380\"\n\n# Check if etcd is accessible from worker nodes (should NOT be)\n# Run from a worker node:\ncurl -k https:\u002F\u002F\u003Ccontrol-plane-ip>:2379\u002Fhealth\n# Should be rejected\u002Ftimeout\n```\n\n## CIS Benchmark Checks\n\n| CIS Control | Check | Expected Result |\n|-------------|-------|----------------|\n| 2.1 | etcd cert-file set | TLS certificate configured |\n| 2.2 | etcd client-cert-auth | Client certificate authentication enabled |\n| 2.3 | etcd auto-tls disabled | auto-tls=false |\n| 2.4 | etcd peer cert-file set | Peer TLS configured |\n| 2.5 | etcd peer client-cert-auth | Peer authentication enabled |\n| 2.6 | etcd peer auto-tls disabled | peer-auto-tls=false |\n| 2.7 | etcd unique CA | Separate CA for etcd (not shared with cluster) |\n\n## Key Rotation Procedure\n\n```bash\n# 1. Generate new encryption key\nNEW_KEY=$(head -c 32 \u002Fdev\u002Furandom | base64)\n\n# 2. Update EncryptionConfiguration with new key first\ncat > \u002Fetc\u002Fkubernetes\u002Fenc\u002Fencryption-config.yaml \u003C\u003CEOF\napiVersion: apiserver.config.k8s.io\u002Fv1\nkind: EncryptionConfiguration\nresources:\n  - resources:\n      - secrets\n    providers:\n      - aescbc:\n          keys:\n            - name: key2\n              secret: ${NEW_KEY}\n            - name: key1\n              secret: \u003Cold-key>\n      - identity: {}\nEOF\n\n# 3. Restart API server to pick up new config\n# 4. Re-encrypt all secrets with new key\nkubectl get secrets --all-namespaces -o json | \\\n  kubectl replace -f -\n\n# 5. Remove old key from EncryptionConfiguration\n# 6. Restart API server again\n```\n\n## References\n\n- [Kubernetes etcd Encryption Documentation](https:\u002F\u002Fkubernetes.io\u002Fdocs\u002Ftasks\u002Fadminister-cluster\u002Fencrypt-data\u002F)\n- [CIS Kubernetes Benchmark - etcd Controls](https:\u002F\u002Fwww.cisecurity.org\u002Fbenchmark\u002Fkubernetes)\n- [Securing etcd - K8s Security Guide](https:\u002F\u002Fk8s-security.geek-kb.com\u002Fdocs\u002Fbest_practices\u002Fcluster_setup_and_hardening\u002Fcontrol_plane_security\u002Fetcd_security_mitigation\u002F)\n- [Infosec: Encryption and etcd](https:\u002F\u002Fwww.infosecinstitute.com\u002Fresources\u002Fcryptography\u002Fencryption-and-etcd-the-key-to-securing-kubernetes\u002F)\n",{"name":5,"tags":25,"author":34,"domain":35,"license":15,"version":36,"subdomain":37,"description":7},[26,27,28,29,30,31,32,33],"kubernetes","etcd","encryption","tls","security-assessment","backup","secrets","control-plane","mahipal","cybersecurity","1.0","container-security","main","c2b1fdccc779e99ac814e55fb69ca8d71215dd0f","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection","https:\u002F\u002Fgithub.com\u002FSamuelChien","http:\u002F\u002Fsamuelchien.com\u002F","2026-05-26 08:27:14",{"source":8,"skillName":5,"commands":45,"prompt":55,"zipAvailable":56},[46,49,52],{"tool":47,"command":48},"npx","npx skills add SamuelChien\u002Fmega-skills-collection --skill performing-kubernetes-etcd-security-assessment",{"tool":50,"command":51},"bunx","bunx skills add SamuelChien\u002Fmega-skills-collection --skill performing-kubernetes-etcd-security-assessment",{"tool":53,"command":54},"pnpm","pnpm dlx skills add SamuelChien\u002Fmega-skills-collection --skill performing-kubernetes-etcd-security-assessment","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002FSKILL.md",true,[58,64,68,74,78,82,88],{"path":59,"resourceType":60,"resourceTypeDesc":61,"sizeBytes":62,"sourceHtmlUrl":63},"assets\u002Ftemplate.md","ASSET","资产文件",566,"https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002Fassets\u002Ftemplate.md",{"path":65,"resourceType":65,"resourceTypeDesc":66,"sizeBytes":67,"sourceHtmlUrl":16},"LICENSE","许可证",11255,{"path":69,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":72,"sourceHtmlUrl":73},"references\u002Fapi-reference.md","REFERENCE","参考文档",1855,"https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002Freferences\u002Fapi-reference.md",{"path":75,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":76,"sourceHtmlUrl":77},"references\u002Fstandards.md",930,"https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002Freferences\u002Fstandards.md",{"path":79,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":80,"sourceHtmlUrl":81},"references\u002Fworkflows.md",737,"https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002Freferences\u002Fworkflows.md",{"path":83,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":86,"sourceHtmlUrl":87},"scripts\u002Fagent.py","SCRIPT","脚本",8289,"https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002Fscripts\u002Fagent.py",{"path":89,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":90,"sourceHtmlUrl":91},"scripts\u002Fprocess.py",7589,"https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fperforming-kubernetes-etcd-security-assessment\u002Fscripts\u002Fprocess.py",[93,101,108,115,122,129],{"skillNo":94,"name":95,"nameZh":6,"description":96,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":97,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":100,"publishedAt":20},"01M76R4WZQZAXGGXMQCA0FZ716","zustand-store-ts","Create Zustand stores with TypeScript, subscribeWithSelector middleware, and proper state\u002Faction separation. Use when building React state management, creating global stores, or implementing reactive state patterns with Zustand.","MIT","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fzustand-store-ts\u002FSKILL.md",[],[],{"skillNo":102,"name":103,"nameZh":6,"description":104,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":97,"licenseFileUrl":6,"sourceHtmlUrl":105,"categories":106,"keywords":107,"publishedAt":20},"01M76R4T9KENDH7FENGZQHBW4G","zustand-store-creator","Zustand Store Creator - Auto-activating skill for Frontend Development.\nTriggers on: zustand store creator, zustand store creator\nPart of the Frontend Development skill category.","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fzustand-store-creator\u002FSKILL.md",[],[],{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":97,"licenseFileUrl":6,"sourceHtmlUrl":112,"categories":113,"keywords":114,"publishedAt":20},"01M76R3YWN84B7SANJ52X799ZE","zero-trust-config-helper","Zero Trust Config Helper - Auto-activating skill for Security Advanced.\nTriggers on: zero trust config helper, zero trust config helper\nPart of the Security Advanced skill category.","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fzero-trust-config-helper\u002FSKILL.md",[],[],{"skillNo":116,"name":117,"nameZh":6,"description":118,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":97,"licenseFileUrl":6,"sourceHtmlUrl":119,"categories":120,"keywords":121,"publishedAt":20},"01M76R3HNSV2AEYSKHM915GJ58","zapier-integration-helper","Zapier Integration Helper - Auto-activating skill for Business Automation.\nTriggers on: zapier integration helper, zapier integration helper\nPart of the Business Automation skill category.","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fzapier-integration-helper\u002FSKILL.md",[],[],{"skillNo":123,"name":124,"nameZh":6,"description":125,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":126,"categories":127,"keywords":128,"publishedAt":20},"01M76R3DJSKAT4FA7DV4BF3GCE","zai-cli","Execute z.AI CLI providing vision, search, reader, and GitHub exploration via CLI and MCP.\nUse when user needs image\u002Fvideo analysis, OCR, UI-to-code conversion, error diagnosis,\nreal-time web search, web page to markdown extraction, or GitHub code exploration.\nTrigger with phrases like \"analyze this image\", \"search the web for\", \"read this page\",\n\"explore this repo\", or \"use zai\". Requires Z_AI_API_KEY.","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fzai-cli\u002FSKILL.md",[],[],{"skillNo":130,"name":131,"nameZh":6,"description":132,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":97,"licenseFileUrl":6,"sourceHtmlUrl":133,"categories":134,"keywords":135,"publishedAt":20},"01M76R2KAM699XE9AJVAWE4H2E","yt-research","Research competitor YouTube channels, niches, and trending topics for your content strategy.\nUse this skill whenever the user says \"research channels\", \"analyze competitors\", \"find trending topics\",\n\"niche analysis\", \"competitive research\", \"what are other creators doing\", \"scrape YouTube channels\",\nor wants to understand the competitive landscape for a specific tool or topic area. Use when working with yt research. Trigger with 'yt', 'research'.","https:\u002F\u002Fgithub.com\u002FSamuelChien\u002Fmega-skills-collection\u002Fblob\u002Fmain\u002Fyt-research\u002FSKILL.md",[],[]]