[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:pro6":3,"skills:sce6":50,"skills:creators9":95,"skills:stats":193,"skills:all:stars:106:":195},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13274,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7775,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39458,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26531,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13569,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":96,"total":191,"current":11,"size":192},[97,111,120,130,140,150,160,169,179],{"accountNo":98,"login":99,"displayName":100,"avatarUrl":101,"accountType":102,"accountTypeDesc":103,"profileDescription":104,"skillCount":105,"repoCount":106,"professionCount":107,"scenarioCount":108,"totalStars":109,"updatedAt":110},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,11,7,828772,"2026-11-13 04:10:52",{"accountNo":112,"login":113,"displayName":113,"avatarUrl":114,"accountType":102,"accountTypeDesc":103,"profileDescription":115,"skillCount":116,"repoCount":117,"professionCount":108,"scenarioCount":108,"totalStars":118,"updatedAt":119},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":121,"login":122,"displayName":123,"avatarUrl":124,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":125,"repoCount":126,"professionCount":108,"scenarioCount":127,"totalStars":128,"updatedAt":129},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":131,"login":132,"displayName":133,"avatarUrl":134,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":135,"repoCount":136,"professionCount":137,"scenarioCount":108,"totalStars":138,"updatedAt":139},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":141,"login":142,"displayName":143,"avatarUrl":144,"accountType":102,"accountTypeDesc":103,"profileDescription":145,"skillCount":146,"repoCount":147,"professionCount":107,"scenarioCount":108,"totalStars":148,"updatedAt":149},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242366,"2026-11-13 04:17:09",{"accountNo":151,"login":152,"displayName":153,"avatarUrl":154,"accountType":102,"accountTypeDesc":103,"profileDescription":155,"skillCount":156,"repoCount":157,"professionCount":107,"scenarioCount":108,"totalStars":158,"updatedAt":159},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",940,28,238441,"2026-11-13 03:57:35",{"accountNo":161,"login":162,"displayName":163,"avatarUrl":164,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":165,"repoCount":166,"professionCount":107,"scenarioCount":108,"totalStars":167,"updatedAt":168},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231826,"2026-11-13 04:18:26",{"accountNo":170,"login":171,"displayName":172,"avatarUrl":173,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":174,"repoCount":175,"professionCount":176,"scenarioCount":108,"totalStars":177,"updatedAt":178},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":180,"login":181,"displayName":182,"avatarUrl":183,"accountType":184,"accountTypeDesc":185,"profileDescription":186,"skillCount":187,"repoCount":188,"professionCount":127,"scenarioCount":108,"totalStars":189,"updatedAt":190},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174614,"2026-11-13 04:05:07",1926,9,{"skillCount":194,"professionCount":107,"scenarioCount":108,"creatorCount":191},196852,{"records":196,"total":194,"current":595,"size":596},[197,230,261,283,309,334,357,379,398,421,441,458,475,496,516,533,555,576],{"skillNo":198,"name":199,"nameZh":13,"description":200,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":209,"categories":210,"keywords":214,"publishedAt":229},"01M6AEZQ0JHH74HT31YHX2M5MG","implementing-attack-path-analysis-with-xm-cyber","Deploys XM Cyber's continuous exposure management platform to build attack graphs that chain vulnerabilities, misconfigurations, identity risks, and credential weaknesses toward critical assets, identifying the small fraction of exposures sitting on converging \"choke points\". Use when mapping attack paths across an environment or prioritizing remediation within a continuous threat exposure management (CTEM) program.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-attack-path-analysis-with-xm-cyber\u002FSKILL.md",[211],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000023","Skill与智能体开发",[215,216,217,218,219,220,221,222,223,224,225,226,227,228],"attack path analysis","implementing attack path analysis with xm cyber","cybersecurity","vulnerabilities","identity","vulnerability-management","remediation","attack-surface","xm-cyber","attack-path-analysis","exposure-management","ctem","choke-points","breach-simulation","2026-11-10 10:12:30",{"skillNo":231,"name":232,"nameZh":13,"description":233,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":234,"categories":235,"keywords":242,"publishedAt":229},"01M6AEZJSYY3DPYBMNVK5T2VFW","implementing-aqua-security-for-container-scanning","Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI\u002FCD pipelines and registries.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-aqua-security-for-container-scanning\u002FSKILL.md",[236,239],{"categoryNo":237,"categoryName":238,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":240,"categoryName":241,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000016","图像与多媒体",[243,244,245,246,217,218,247,248,249,250,251,252,253,254,255,256,257,258,259,260],"security","implementing aqua security for container scanning","image","devsecops","pr","container images","issues","license","ci","SBOM","supply-chain","container-scanning","vulnerability-scanning","t1059","t1195","aqua-security","trivy","image-security",{"skillNo":262,"name":263,"nameZh":13,"description":264,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":265,"categories":266,"keywords":268,"publishedAt":229},"01M6AEZEYEDXG1GAV94HS1T80K","implementing-application-whitelisting-with-applocker","Implements application whitelisting using Windows AppLocker to restrict unauthorized software execution on endpoints, reducing attack surface from malware, unauthorized tools, and shadow IT. Use when enforcing application control policies, meeting compliance requirements for software restriction, or preventing execution of unsigned or untrusted binaries. Activates for requests involving AppLocker, application whitelisting, software restriction, or executable control.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-application-whitelisting-with-applocker\u002FSKILL.md",[267],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[269,270,243,217,271,247,272,273,274,275,276,277,278,279,256,280,281,282],"AppLocker","implementing application whitelisting with applocker","windows","compliance","malware","endpoint-security","endpoint","windows-security","t1055","Tools","execution","t1547","application-whitelisting","software-restriction",{"skillNo":284,"name":285,"nameZh":13,"description":286,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":287,"categories":288,"keywords":293,"publishedAt":229},"01M6AEZAN69ZB0ECJWCAQX31GJ","implementing-api-threat-protection-with-apigee","Implements API threat protection using Google Apigee reverse-proxy policies, including JSON\u002FXML threat protection, OAuth 2.0 enforcement, SpikeArrest rate limiting, regex-based threat detection, and Advanced API Security for detecting malicious clients. Use when shielding APIs proxied through Apigee against OWASP API Security Top 10 threats and malicious client abuse patterns.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-threat-protection-with-apigee\u002FSKILL.md",[289,292],{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[294,142,295,296,243,217,247,297,298,299,300,301,302,256,303,304,305,306,307,308],"implementing api threat protection with apigee","malicious","spike","gateway","proxy","api-security","OAuth","owasp","t1078","owasp-api","api-gateway","apigee","threat-protection","json-threat-protection","xml-threat-protection",{"skillNo":310,"name":311,"nameZh":13,"description":312,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":313,"categories":314,"keywords":321,"publishedAt":229},"01M6AEZ6CDV5RSBRHYGJGKFJR2","implementing-api-security-testing-with-42crunch","Implements API security testing on the 42Crunch platform, combining API Audit for static analysis of OpenAPI definitions, API Conformance Scan for dynamic vulnerability testing, and API Protect for runtime threat prevention, integrated into CI\u002FCD pipelines and IDEs. Use when shift-left testing APIs for OWASP API Security Top 10 vulnerabilities or setting up 42Crunch audit and conformance scanning.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-security-testing-with-42crunch\u002FSKILL.md",[315,318,319,320],{"categoryNo":316,"categoryName":317,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[322,243,323,217,218,247,324,251,299,325,326,327,256,303,328,329,330,331,332,333],"testing","implementing api security testing with 42crunch","audit","ci-cd","owasp-api-top-10","ci-cd-security","openapi","42crunch","api-audit","api-scan","conformance-testing","shift-left",{"skillNo":335,"name":336,"nameZh":13,"description":337,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":338,"categories":339,"keywords":342,"publishedAt":229},"01M6AEZ30FJ41SN7WZN5TN8BC4","implementing-api-security-posture-management","Implements API Security Posture Management (API-SPM) to continuously discover, classify, and risk-score APIs -- including internal, external, partner, and shadow endpoints -- while aggregating findings from DAST, SAST, SCA, and runtime monitoring into a unified risk view. Use when building continuous API inventory and risk-scoring, detecting configuration drift or policy violations, or unifying API risk visibility across an organization.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-security-posture-management\u002FSKILL.md",[340,341],{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[243,343,344,345,217,346,247,347,299,348,349,350,351,256,352,353,354,355,356],"implementing api security posture management","sast","policy","governance","monitoring","dast","api-discovery","api-inventory","api-governance","continuous-monitoring","risk","aspm","api-posture-management","risk-scoring",{"skillNo":358,"name":359,"nameZh":13,"description":360,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":361,"categories":362,"keywords":365,"publishedAt":229},"01M6AEYZ556T5TTPQSHAX93YWN","implementing-api-schema-validation-security","Implements API schema validation using OpenAPI Specification and JSON Schema documents, enforced both at the API gateway (runtime) and during development (shift-left), to lock down request\u002Fresponse contracts and reject unknown properties. Use when preventing injection attacks (SQLi, XSS, XXE), blocking mass assignment, or stopping data leakage through unvalidated API responses.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-schema-validation-security\u002FSKILL.md",[363,364],{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[243,366,367,217,368,247,369,370,371,297,299,372,373,374,375,376,304,377,328,378],"validation","implementing api schema validation security","documents","json schema","development","api gateway","data","injection","sqli","xss","prevention","schema-validation","json-schema",{"skillNo":380,"name":381,"nameZh":13,"description":382,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":383,"categories":384,"keywords":388,"publishedAt":229},"01M6AEYVK7CYZ9NDRA0636X5KY","implementing-api-rate-limiting-and-throttling","Implements API rate limiting and throttling with token bucket, sliding window, and fixed window algorithms, configuring per-user, per-IP, and per-endpoint limits via Redis-backed counters, API gateway plugins, or middleware, and returning proper HTTP 429 responses with Retry-After headers. Use when setting up request quota management or preventing brute force, credential stuffing, and resource exhaustion attacks against APIs.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-rate-limiting-and-throttling\u002FSKILL.md",[385,386,387],{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[389,243,217,390,247,371,297,391,392,299,275,393,394,256,376,395,396,397],"implementing api rate limiting and throttling","http","plugins","redis","rate-limiting","t1003","token-bucket","throttling","abuse-prevention",{"skillNo":399,"name":400,"nameZh":13,"description":401,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":402,"categories":403,"keywords":407,"publishedAt":229},"01M6AEYQZFFB6Y921Q8CCF6P12","implementing-api-key-security-controls","Implements secure API key generation with sufficient entropy, server-side hashing (SHA-256\u002Fbcrypt) instead of plaintext storage, per-key scoping to endpoints\u002FIPs\u002Frate limits, zero-downtime rotation, and automated leak monitoring across GitHub repos, logs, and client-side code. Use when designing API key formats, building key rotation or revocation workflows, or protecting server-to-server API credentials from leakage, brute force, and abuse.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-key-security-controls\u002FSKILL.md",[404,405,406],{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[243,408,152,217,409,410,247,411,412,347,413,299,414,415,416,256,417,418,419,420],"implementing api key security controls","storage","workflows","code","logs","server","ZeRO","ips","entropy","api-keys","credential-management","key-rotation","secret-management",{"skillNo":422,"name":423,"nameZh":13,"description":424,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":425,"categories":426,"keywords":430,"publishedAt":229},"01M6AEYMR97GVGHXCBY5KNG494","implementing-api-gateway-security-controls","Configures API gateways such as Kong, AWS API Gateway, Azure APIM, or Apigee as a centralized security enforcement point, covering authentication enforcement, rate limiting and throttling, request validation, IP allowlisting, TLS termination, and threat protection. Use when securing API traffic at the gateway layer, setting up gateway-level authentication and quota management, or centralizing API protection before requests reach backend services.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-gateway-security-controls\u002FSKILL.md",[427,428,429],{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[243,371,297,431,217,432,247,433,366,434,435,436,299,437,438,439,440,302,256,304],"implementing api gateway security controls","azure","authentication","gateways","services","waf","aws-api-gateway","kong","aws","tls",{"skillNo":442,"name":443,"nameZh":13,"description":444,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":445,"categories":446,"keywords":449,"publishedAt":229},"01M6AEYH1NM63VT3J5D7MSNVYX","implementing-api-abuse-detection-with-rate-limiting","Implements API abuse detection using token bucket, sliding window, and fixed window rate-limiting algorithms backed by Redis, including adaptive limits that tighten during detected attacks and relax during normal traffic. Use when defending APIs against DDoS, brute force login attempts, credential stuffing, or scraping abuse and you need to design or tune rate-limiting logic.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-api-abuse-detection-with-rate-limiting\u002FSKILL.md",[447,448],{"categoryNo":290,"categoryName":291,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[450,451,452,243,217,247,297,392,299,453,393,394,256,395,454,455,456,457,304],"detection","implementing api abuse detection with rate limiting","design","brute-force","sliding-window","ddos-protection","brute-force-prevention","api-abuse",{"skillNo":459,"name":460,"nameZh":13,"description":461,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":462,"categories":463,"keywords":465,"publishedAt":229},"01M6AEYDMXKXG7W52M2JHHM6KG","implementing-anti-ransomware-group-policy","Configures Windows Group Policy Objects to block ransomware execution and lateral spread, covering AppLocker rules, Software Restriction Policies, Controlled Folder Access, attack surface reduction rules, and network protection settings. Use when hardening Windows endpoints against ransomware via GPO, configuring AppLocker or Controlled Folder Access, or building endpoint protection policies through Group Policy.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-anti-ransomware-group-policy\u002FSKILL.md",[464],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[345,466,467,217,271,247,468,469,470,275,471,302,278,279,256,472,473,474,269,376],"ransomware","implementing anti ransomware group policy","phishing","network","cryptocurrency","defense","t1490","initial-access","group-policy",{"skillNo":476,"name":477,"nameZh":13,"description":478,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":479,"categories":480,"keywords":482,"publishedAt":229},"01M6AEY9XVYG94QD0EE1ZNMDAX","implementing-anti-phishing-training-program","Guides designing, deploying, and measuring an anti-phishing security awareness program - baseline phishing simulations, interactive training modules, just-in-time learning, and metric tracking - using platforms like KnowBe4, Proofpoint Security Awareness, or Cofense. Use when building or maturing a phishing awareness program, establishing training controls for compliance, or measuring phishing susceptibility and reporting rates over time.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002FSKILL.md",[481],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[483,468,484,243,217,485,247,486,487,488,272,489,490,491,492,493,471,473,494,495],"training","implementing anti phishing training program","official","email","reporting","engineering","dmarc","email-security","social-engineering","awareness","reconnaissance","t1566","security-culture",{"skillNo":497,"name":498,"nameZh":13,"description":499,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":500,"categories":501,"keywords":503,"publishedAt":229},"01M6AEY61TQMN91JQPCZ4EJ4G9","implementing-alert-fatigue-reduction","Implements strategies to reduce SOC alert fatigue by tuning detection rules, consolidating duplicate alerts, implementing risk-based alerting, and measuring alert quality metrics to maintain analyst effectiveness and prevent critical alert dismissal. Use when SOC teams face overwhelming alert volumes, high false positive rates, or declining analyst performance.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-alert-fatigue-reduction\u002FSKILL.md",[502],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[504,505,217,506,507,508,509,488,510,511,450,302,353,494,512,513,514,515],"implementing alert fatigue reduction","performance","siem","teams","metrics","alerting","soc","detection-engineering","alert-fatigue","tuning","risk-based-alerting","false-positive",{"skillNo":517,"name":518,"nameZh":13,"description":519,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":520,"categories":521,"keywords":524,"publishedAt":229},"01M6AEY2378974D5GZ2ERZ5TQ7","implementing-aes-encryption-for-data-at-rest","Guides implementing AES-256 encryption in GCM mode (FIPS 197) for files and data stores at rest, covering key derivation, IV\u002Fnonce management, and authenticated encryption. Use when deploying or configuring encryption for data at rest, establishing controls to meet compliance requirements, or reviewing an implementation during a security assessment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-aes-encryption-for-data-at-rest\u002FSKILL.md",[522,523],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":23,"categoryName":24,"taxonomyType":6,"taxonomyTypeDesc":7},[372,525,526,527,243,217,247,528,272,529,530,531,532],"encryption","REST","implementing aes encryption for data at rest","assessment","cryptography","aes","data-at-rest","symmetric-encryption",{"skillNo":534,"name":535,"nameZh":13,"description":536,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":537,"categories":538,"keywords":540,"publishedAt":229},"01M6AEXYHYREYZ2WE9QHTJP2PJ","hunting-saas-sso-token-abuse","Hunts for stolen-session and OAuth\u002FPRT token replay (T1550.001) by correlating Microsoft Entra ID SigninLogs SessionId\u002FUniqueTokenIdentifier fields and Okta System Log sso\u002Fsession events to spot impossible travel, refresh-token reuse, and token use from anomalous ASNs. Use when hunting MFA-bypass via stolen cookies\u002Ftokens, investigating impossible-travel alerts, or scoping SaaS lateral movement after phishing.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fhunting-saas-sso-token-abuse\u002FSKILL.md",[539],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[541,542,543,217,99,544,545,546,468,510,300,547,548,511,549,550,551,552,553,554],"sso","saas","hunting saas sso token abuse","entra id","threat-hunting","cookies","entra-id","token-theft","mfa","impossible-travel","PRT","t1550","pass-the-cookie","okta",{"skillNo":556,"name":557,"nameZh":13,"description":558,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":559,"categories":560,"keywords":562,"publishedAt":229},"01M6AEXTWD7S99X1DZF26B5T97","hunting-for-webshell-activity","Runs a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing servers by analyzing file creation in web directories, suspicious child-process spawning from web server processes, and anomalous HTTP request patterns. Use when hunting for web shells after a public-facing app compromise, when EDR\u002FSIEM alerts fire on webserver process anomalies, or during incident response on internet-facing infrastructure.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fhunting-for-webshell-activity\u002FSKILL.md",[561],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[563,564,217,565,506,566,390,567,568,366,569,413,570,545,571,572,279,573,574,575],"hunting for webshell activity","suspicious","incident response","web","infrastructure","deployment","file","mitre-attack","analyzing","edr","webshell","web-server","t1505",{"skillNo":577,"name":578,"nameZh":13,"description":579,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":580,"categories":581,"keywords":582,"publishedAt":229},"01M6AEXQAKCYXCNEY5AZEVZACG","hunting-for-unusual-service-installations","Detects suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event log Event ID 7045, analyzing service binary paths, and flagging indicators of persistence mechanisms via Sysmon\u002FEDR telemetry. Use when hunting for new-service persistence after a suspected compromise, when Event ID 7045 fires for an unfamiliar service, or during incident response to enumerate service-based persistence on Windows hosts.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fhunting-for-unusual-service-installations\u002FSKILL.md",[],[583,564,217,565,271,584,585,586,435,545,571,587,588,589,572,590,591,592,593,594],"hunting for unusual service installations","telemetry","permissions","database","sysmon","hardening","ATT&CK","indicators","T1543.003","service-installation","Event-7045","Windows-services",106,18]