[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:stats":3,"skills:pro6":8,"skills:sce6":55,"skills:creators9":100,"skills:all:stars:123:":195},{"skillCount":4,"professionCount":5,"scenarioCount":6,"creatorCount":7},196852,11,7,1926,[9,20,27,34,41,48],{"categoryNo":10,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":13,"categoryNameEn":14,"description":15,"level":16,"skillCount":17,"parentNo":18,"parentName":18,"children":19},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13274,null,[],{"categoryNo":21,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":22,"categoryNameEn":23,"description":24,"level":16,"skillCount":25,"parentNo":18,"parentName":18,"children":26},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7775,[],{"categoryNo":28,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":29,"categoryNameEn":30,"description":31,"level":16,"skillCount":32,"parentNo":18,"parentName":18,"children":33},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":35,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":36,"categoryNameEn":37,"description":38,"level":16,"skillCount":39,"parentNo":18,"parentName":18,"children":40},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":42,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":43,"categoryNameEn":44,"description":45,"level":16,"skillCount":46,"parentNo":18,"parentName":18,"children":47},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":49,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":50,"categoryNameEn":51,"description":52,"level":16,"skillCount":53,"parentNo":18,"parentName":18,"children":54},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[56,65,72,79,86,93],{"categoryNo":57,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":60,"categoryNameEn":61,"description":62,"level":16,"skillCount":63,"parentNo":18,"parentName":18,"children":64},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39458,[],{"categoryNo":66,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":67,"categoryNameEn":68,"description":69,"level":16,"skillCount":70,"parentNo":18,"parentName":18,"children":71},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26531,[],{"categoryNo":73,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":74,"categoryNameEn":75,"description":76,"level":16,"skillCount":77,"parentNo":18,"parentName":18,"children":78},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13569,[],{"categoryNo":80,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":81,"categoryNameEn":82,"description":83,"level":16,"skillCount":84,"parentNo":18,"parentName":18,"children":85},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":87,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":88,"categoryNameEn":89,"description":90,"level":16,"skillCount":91,"parentNo":18,"parentName":18,"children":92},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":94,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":95,"categoryNameEn":96,"description":97,"level":16,"skillCount":98,"parentNo":18,"parentName":18,"children":99},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":101,"total":7,"current":16,"size":194},[102,114,123,133,143,153,163,172,182],{"accountNo":103,"login":104,"displayName":105,"avatarUrl":106,"accountType":107,"accountTypeDesc":108,"profileDescription":109,"skillCount":110,"repoCount":111,"professionCount":5,"scenarioCount":6,"totalStars":112,"updatedAt":113},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,828772,"2026-11-13 04:10:52",{"accountNo":115,"login":116,"displayName":116,"avatarUrl":117,"accountType":107,"accountTypeDesc":108,"profileDescription":118,"skillCount":119,"repoCount":120,"professionCount":6,"scenarioCount":6,"totalStars":121,"updatedAt":122},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":124,"login":125,"displayName":126,"avatarUrl":127,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":128,"repoCount":129,"professionCount":6,"scenarioCount":130,"totalStars":131,"updatedAt":132},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":134,"login":135,"displayName":136,"avatarUrl":137,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":138,"repoCount":139,"professionCount":140,"scenarioCount":6,"totalStars":141,"updatedAt":142},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":144,"login":145,"displayName":146,"avatarUrl":147,"accountType":107,"accountTypeDesc":108,"profileDescription":148,"skillCount":149,"repoCount":150,"professionCount":5,"scenarioCount":6,"totalStars":151,"updatedAt":152},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242366,"2026-11-13 04:17:09",{"accountNo":154,"login":155,"displayName":156,"avatarUrl":157,"accountType":107,"accountTypeDesc":108,"profileDescription":158,"skillCount":159,"repoCount":160,"professionCount":5,"scenarioCount":6,"totalStars":161,"updatedAt":162},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",940,28,238441,"2026-11-13 03:57:35",{"accountNo":164,"login":165,"displayName":166,"avatarUrl":167,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":168,"repoCount":169,"professionCount":5,"scenarioCount":6,"totalStars":170,"updatedAt":171},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231826,"2026-11-13 04:18:26",{"accountNo":173,"login":174,"displayName":175,"avatarUrl":176,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":177,"repoCount":178,"professionCount":179,"scenarioCount":6,"totalStars":180,"updatedAt":181},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":183,"login":184,"displayName":185,"avatarUrl":186,"accountType":187,"accountTypeDesc":188,"profileDescription":189,"skillCount":190,"repoCount":191,"professionCount":130,"scenarioCount":6,"totalStars":192,"updatedAt":193},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174614,"2026-11-13 04:05:07",9,{"records":196,"total":4,"current":574,"size":575},[197,232,262,285,308,327,351,373,394,408,424,452,477,494,509,522,541,554],{"skillNo":198,"name":199,"nameZh":18,"description":200,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":209,"categories":210,"keywords":214,"publishedAt":231},"01M6ADXC5ZH5FRGY6ARAYR0SH4","building-adversary-infrastructure-tracking-system","Build an automated adversary infrastructure tracking system in Python (dnspython, python-whois, shodan, networkx) that pivots across passive DNS, certificate transparency logs, WHOIS records, and IP enrichment to map threat-actor C2 networks and flag newly registered domains matching known patterns. Use when pivoting from known indicators to discover related C2 infrastructure or maintaining a continuously updated map of a threat actor's network.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fbuilding-adversary-infrastructure-tracking-system\u002FSKILL.md",[211],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000023","Skill与智能体开发",[215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230],"infrastructure","building adversary infrastructure tracking system","python","cybersecurity","logs","threat-actor","threat-intelligence","c2","dns","network","enrichment","infrastructure-tracking","passive-dns","whois","pivoting","domain-analysis","2026-11-10 10:12:30",{"skillNo":233,"name":234,"nameZh":18,"description":235,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":236,"categories":237,"keywords":242,"publishedAt":231},"01M6ADX8JQHY3B1RQHJAPWFDN0","benchmarking-kubernetes-with-kube-bench","Installs and runs the kube-bench tool against a Kubernetes cluster as a Job, DaemonSet, or standalone binary, selecting the correct benchmark version and targets (control plane, etcd, kubelet, worker nodes) and emitting JSON or JUnit output for pipelines. Use when setting kube-bench up for the first time, choosing which benchmark version and node targets to run, wiring it into CI, or troubleshooting skipped or misdetected checks. Keywords: kube-bench, DaemonSet, --benchmark, --targets, JSON output, JUnit, CI integration. Do not use for interpreting the findings or producing an audit report - use performing-kubernetes-cis-benchmark-with-kube-bench.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fbenchmarking-kubernetes-with-kube-bench\u002FSKILL.md",[238,241],{"categoryNo":239,"categoryName":240,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[243,244,245,218,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261],"kubernetes","benchmarking","benchmarking kubernetes with kube bench","pr","run","benchmark","report","control plane","audit","integration","audit report","ci","compliance","container-security","JSON Output","kube-bench","cis-benchmark","hardening","cluster-security",{"skillNo":263,"name":264,"nameZh":18,"description":265,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":266,"categories":267,"keywords":269,"publishedAt":231},"01M6ADX59XVTRXE27H572T6EEA","automating-ioc-enrichment","Automates the enrichment of raw indicators of compromise with multi-source threat intelligence context using SOAR platforms, Python pipelines, or TIP playbooks to reduce analyst triage time and standardize enrichment outputs. Use when building automated enrichment workflows integrated with SIEM alerts, email submission pipelines, or bulk IOC processing from threat feeds. Activates for requests involving SOAR enrichment, Cortex XSOAR, Splunk SOAR, TheHive, Python enrichment pipelines, or automated IOC processing.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fautomating-ioc-enrichment\u002FSKILL.md",[268],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[270,271,217,218,272,273,274,275,276,277,278,221,279,280,281,282,225,283,284],"ioc","automating ioc enrichment","siem","soar","threat intelligence","triage","automation","workflows","email","cti","NIST-CSF","splunk","VirusTotal","Cortex-XSOAR","Splunk-SOAR",{"skillNo":286,"name":287,"nameZh":18,"description":288,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":289,"categories":290,"keywords":292,"publishedAt":231},"01M6ADX1SQ5ZX1MVD47ZPSPGTY","auditing-uefi-firmware-with-chipsec","Use Intel CHIPSEC to assess platform firmware configuration, SPI flash write protection, BIOS lock, SMM\u002FSMRR, and Secure Boot variable state, dump SPI flash, and triage UEFI variables for firmware-level threats.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-uefi-firmware-with-chipsec\u002FSKILL.md",[291],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[293,294,295,296,297,218,275,298,299,300,301,302,303,304,305,306,307],"UEFI","firmware","chipsec","auditing uefi firmware with chipsec","security","secure","boot","assessment","state","Secure-Boot","hardware-firmware-security","spi-flash","bios-write-protection","firmware-assessment","platform-security",{"skillNo":309,"name":310,"nameZh":18,"description":311,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":312,"categories":313,"keywords":315,"publishedAt":231},"01M6ADWYA16FK25AZRVCTKHKP3","auditing-tls-certificate-transparency-logs","Monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance, discover subdomains via CT data, and alert on suspicious certificate activity for owned domains. Uses the crt.sh API and direct CT log querying based on RFC 6962 to build continuous monitoring pipelines that catch rogue certificates, track CA behavior, and map the external attack surface. Activates for requests involving certificate transparency monitoring, CT log auditing, subdomain discovery via certificates, or certificate issuance alerting.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-tls-certificate-transparency-logs\u002FSKILL.md",[314],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[219,316,317,218,318,319,221,320,321,322,323,324,325,326],"auditing tls certificate transparency logs","suspicious","alerting","monitoring","certificate-transparency","ct-logs","crt-sh","data","tls-monitoring","subdomain-discovery","RFC-6962",{"skillNo":328,"name":329,"nameZh":18,"description":330,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":331,"categories":332,"keywords":336,"publishedAt":231},"01M6ADWT5YCZM136DXHKYYVW9M","auditing-terraform-infrastructure-for-security","Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA\u002FRego policies to detect overly permissive IAM policies, public resource exposure, missing encryption, and insecure defaults before cloud deployment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-terraform-infrastructure-for-security\u002FSKILL.md",[333,334,335],{"categoryNo":239,"categoryName":240,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":10,"categoryName":13,"taxonomyType":11,"taxonomyTypeDesc":12},[297,215,337,338,339,218,246,340,341,342,343,344,345,346,347,348,349,350],"terraform","auditing terraform infrastructure for security","policy","deployment","opa","code","cloud","cloud-security","encryption","iam","infrastructure-as-code","checkov","tfsec","policy-as-code",{"skillNo":352,"name":353,"nameZh":18,"description":354,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":355,"categories":356,"keywords":358,"publishedAt":231},"01M6ADWPDNDEVH9H9W20DDKNB3","auditing-mcp-servers-for-tool-poisoning","Audit MCP servers for tool poisoning, tool shadowing, rug pulls, SSRF, and unauthenticated exposure using Invariant Labs' mcp-scan for static\u002Fruntime scanning plus manual SSRF\u002Fauth checks and description pinning. Use before adding a new MCP server to an agent stack, when reviewing an internal MCP server, detecting rug pulls, or investigating an agent's unexpected tool-driven behavior.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-mcp-servers-for-tool-poisoning\u002FSKILL.md",[357],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[359,360,361,297,218,362,363,364,251,365,366,367,368,369,370,371,372],"MCP","mcp servers","auditing mcp servers for tool poisoning","mcp server","auth","pull","server","supply-chain","ai-security","tool-poisoning","agent-security","mcp-scan","ssrf","rug-pull",{"skillNo":374,"name":375,"nameZh":18,"description":376,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":377,"categories":378,"keywords":381,"publishedAt":231},"01M6ADWJRWPKTH4CC53BM9E4ZP","auditing-kubernetes-rbac-privilege-escalation","Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess, tracing which subjects can escalate toward cluster-admin. Use when reviewing who can escalate privileges in a cluster, hunting exploitable RoleBindings during an authorized review, or validating least privilege after an RBAC change. Keywords: RBAC, ClusterRoleBinding, service account token, auth can-i, rbac-police, escalate, bind, impersonate. Do not use for designing and applying hardened RBAC - use implementing-rbac-hardening-for-kubernetes.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-kubernetes-rbac-privilege-escalation\u002FSKILL.md",[379,380],{"categoryNo":239,"categoryName":240,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[243,382,383,384,297,218,385,363,246,386,387,388,256,389,390,391,392,393],"rbac","auditing kubernetes rbac privilege escalation","review","change","admin","tracing","privilege-escalation","access-control","service-account","least-privilege","kubectl","attack-paths",{"skillNo":395,"name":396,"nameZh":18,"description":397,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":398,"categories":399,"keywords":402,"publishedAt":231},"01M6ADWF9B4A9B1KMXEATF5TED","auditing-kubernetes-cluster-rbac","Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-kubernetes-cluster-rbac\u002FSKILL.md",[400,401],{"categoryNo":239,"categoryName":240,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[243,382,403,297,218,246,404,343,344,389,405,406,407],"auditing kubernetes cluster rbac","permissions","eks","gke","aks",{"skillNo":409,"name":410,"nameZh":18,"description":411,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":412,"categories":413,"keywords":415,"publishedAt":231},"01M6ADWBA2GNRDN4FG81E3YE26","auditing-gcp-iam-permissions","Auditing Google Cloud Platform IAM permissions to identify overly permissive bindings, primitive role usage, service account key proliferation, and cross-project access risks using gcloud CLI, Policy Analyzer, and IAM Recommender.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-gcp-iam-permissions\u002FSKILL.md",[414],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[404,416,145,417,418,419,297,339,218,246,251,343,344,420,346,421,422,423],"auditing gcp iam permissions","cli","gcloud","google cloud","gcp","permissions-audit","service-accounts","policy-analyzer",{"skillNo":425,"name":426,"nameZh":18,"description":427,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":428,"categories":429,"keywords":436,"publishedAt":231},"01M6ADW6R49S0YE4423EBG4PY8","auditing-foundry-smart-contract-security","Pre-deployment security audit of Solidity smart contracts in a Foundry project. Combines static analysis (Slither, Aderyn), symbolic execution (Mythril), and property-based testing (forge fuzz + invariant tests with handlers) to catch reentrancy, access-control, oracle\u002Fprice manipulation, and arithmetic bugs BEFORE deploying to an EVM chain. Also enforces key hygiene (no plaintext private keys, encrypted cast keystore) and a secure deploy workflow. Use when writing, reviewing, testing, or deploying Solidity\u002FFoundry contracts, building a dApp, or working with forge\u002Fcast\u002Fanvil, MetaMask, or Web3\u002FDeFi code.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-foundry-smart-contract-security\u002FSKILL.md",[430,433,434,435],{"categoryNo":431,"categoryName":432,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":239,"categoryName":240,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":49,"categoryName":50,"taxonomyType":11,"taxonomyTypeDesc":12},[297,437,438,439,440,441,218,442,298,342,251,443,444,445,446,447,448,449,450,451],"foundry","auditing foundry smart contract security","testing","writing","oracle","workflow","ethereum","solidity","smart-contract","analyzing","forge","aderyn","reentrancy","web3","invariant-testing",{"skillNo":453,"name":454,"nameZh":18,"description":455,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":456,"categories":457,"keywords":460,"publishedAt":231},"01M6ADW39Z0AFJMYEBVXNSWFZG","auditing-entra-id-with-aadinternals","Drive the AADInternals PowerShell toolkit to perform Microsoft Entra ID tenant reconnaissance, access-token acquisition across Microsoft APIs, and federation\u002FAD FS backdoor testing (Golden SAML, T1606.002) for defensive validation. Use during an authorized Entra ID\u002FMicrosoft 365 red-team assessment to map external attack surface or verify AD FS signing certs resist Golden SAML.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-entra-id-with-aadinternals\u002FSKILL.md",[458,459],{"categoryNo":431,"categoryName":432,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[461,462,439,218,104,463,464,300,465,466,467,468,469,470,471,472,473,474,475,476],"entra id","auditing entra id with aadinternals","identity","azure","toolkit","validation","fs","red-team","powershell","entra-id","azure-ad","token-manipulation","aadinternals","saml-token-forgery","federation-backdoor","adfs",{"skillNo":478,"name":479,"nameZh":18,"description":480,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":481,"categories":482,"keywords":485,"publishedAt":231},"01M6ADVZMP9VBN08GZZXJS2XX4","auditing-cloud-with-cis-benchmarks","Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and ScoutSuite, interpreting failed controls, and tracking remediation for continuous compliance. Use when conducting a cloud security audit, validating CIS benchmark compliance (CIS v5 AWS, v4 Azure, v4 GCP), or setting up continuous cloud compliance monitoring.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-cloud-with-cis-benchmarks\u002FSKILL.md",[483,484],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":49,"categoryName":50,"taxonomyType":11,"taxonomyTypeDesc":12},[343,486,297,218,464,246,300,248,251,319,487,255,344,488,489,490,491,492,493],"auditing cloud with cis benchmarks","cloud security","aws","cis-benchmarks","cloud-audit","compliance-assessment","prowler","security-hardening",{"skillNo":495,"name":496,"nameZh":18,"description":497,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":498,"categories":499,"keywords":501,"publishedAt":231},"01M6ADVWP9H31AFDBHTJCMJWXV","auditing-azure-active-directory-configuration","Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using AzureAD PowerShell, Microsoft Graph API, and ScoutSuite.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-azure-active-directory-configuration\u002FSKILL.md",[500],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[502,464,503,297,218,104,461,246,504,505,251,343,506,344,469,470,507,508],"directory","auditing azure active directory configuration","authentication","graph","active-directory","iam-audit","conditional-access",{"skillNo":510,"name":511,"nameZh":18,"description":512,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":513,"categories":514,"keywords":517,"publishedAt":231},"01M6ADVSMKXZJTMGFCPF7P7H4X","auditing-aws-s3-bucket-permissions","Systematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fauditing-aws-s3-bucket-permissions\u002FSKILL.md",[515,516],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":28,"categoryName":29,"taxonomyType":11,"taxonomyTypeDesc":12},[404,518,519,417,297,218,246,251,343,344,323,345,488,520,521,389],"s3","auditing aws s3 bucket permissions","bucket-permissions","data-protection",{"skillNo":523,"name":524,"nameZh":18,"description":525,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":526,"categories":527,"keywords":530,"publishedAt":231},"01M6ADVP3QY0E68X1MBH02EAPZ","attacking-oauth-with-device-code-phishing","Run OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID, using TokenTactics-style tooling to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services. Use for authorized red-team engagements simulating device-code or consent-grant phishing against a tenant you have explicit written permission to test.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fattacking-oauth-with-device-code-phishing\u002FSKILL.md",[528,529],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":10,"categoryName":13,"taxonomyType":11,"taxonomyTypeDesc":12},[342,531,532,533,218,534,104,463,461,246,247,535,468,470,536,537,538,539,540],"phishing","OAuth","attacking oauth with device code phishing","test","services","device-code-phishing","token-theft","mfa-bypass","illicit-consent","tokentactics",{"skillNo":542,"name":543,"nameZh":18,"description":544,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":545,"categories":546,"keywords":548,"publishedAt":231},"01M6ADVHWN636CQNRZ70YYM2S9","attacking-entra-id-with-roadtools","Enumerate Microsoft Entra ID (Azure AD) tenants with ROADrecon and acquire, exchange, and abuse tokens (including primary refresh tokens) with roadtx. Use for authorized red-team enumeration of a tenant's directory objects or for token-based identity attacks against Entra ID you are explicitly authorized to test.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fattacking-entra-id-with-roadtools\u002FSKILL.md",[547],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[461,549,502,218,534,104,463,464,343,468,470,471,550,472,551,552,553],"attacking entra id with roadtools","roadtools","cloud-enumeration","primary-refresh-token","identity-attack",{"skillNo":555,"name":556,"nameZh":18,"description":557,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":558,"categories":559,"keywords":562,"publishedAt":231},"01M6ADVE0HGZKAYP03CQ54R96E","assessing-vector-and-embedding-weaknesses","Test RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector, FAISS) for embedding inversion, cross-tenant data leakage, and data poisoning per OWASP LLM08:2025. Use when performing an authorized security assessment of a RAG pipeline's retrieval layer or auditing multi-tenant vector-store isolation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fassessing-vector-and-embedding-weaknesses\u002FSKILL.md",[560,561],{"categoryNo":431,"categoryName":432,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},[563,564,297,218,534,565,300,566,323,367,567,568,569,570,571,572,573],"vector","assessing vector and embedding weaknesses","rag","database","vector-database","embedding-inversion","rag-security","owasp-llm08","multi-tenant-isolation","data-poisoning","retrieval-augmented-generation",123,18]