[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:pro6":3,"skills:sce6":50,"skills:creators9":95,"skills:stats":193,"skills:all:stars:84:":195},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13276,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7776,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3449,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3317,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39462,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26546,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13572,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6291,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6033,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":96,"total":191,"current":11,"size":192},[97,111,120,130,140,150,160,169,179],{"accountNo":98,"login":99,"displayName":100,"avatarUrl":101,"accountType":102,"accountTypeDesc":103,"profileDescription":104,"skillCount":105,"repoCount":106,"professionCount":107,"scenarioCount":108,"totalStars":109,"updatedAt":110},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4166,229,11,7,828075,"2026-11-12 04:48:47",{"accountNo":112,"login":113,"displayName":113,"avatarUrl":114,"accountType":102,"accountTypeDesc":103,"profileDescription":115,"skillCount":116,"repoCount":117,"professionCount":108,"scenarioCount":108,"totalStars":118,"updatedAt":119},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437637,"2026-11-12 03:04:11",{"accountNo":121,"login":122,"displayName":123,"avatarUrl":124,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":125,"repoCount":126,"professionCount":108,"scenarioCount":127,"totalStars":128,"updatedAt":129},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,341786,"2026-11-12 03:20:15",{"accountNo":131,"login":132,"displayName":133,"avatarUrl":134,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":135,"repoCount":136,"professionCount":137,"scenarioCount":108,"totalStars":138,"updatedAt":139},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298091,"2026-11-12 05:32:19",{"accountNo":141,"login":142,"displayName":143,"avatarUrl":144,"accountType":102,"accountTypeDesc":103,"profileDescription":145,"skillCount":146,"repoCount":147,"professionCount":107,"scenarioCount":108,"totalStars":148,"updatedAt":149},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,241637,"2026-11-12 03:57:04",{"accountNo":151,"login":152,"displayName":153,"avatarUrl":154,"accountType":102,"accountTypeDesc":103,"profileDescription":155,"skillCount":156,"repoCount":157,"professionCount":107,"scenarioCount":108,"totalStars":158,"updatedAt":159},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",936,27,238133,"2026-11-12 03:23:28",{"accountNo":161,"login":162,"displayName":163,"avatarUrl":164,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":165,"repoCount":166,"professionCount":107,"scenarioCount":108,"totalStars":167,"updatedAt":168},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231455,"2026-11-12 03:40:35",{"accountNo":170,"login":171,"displayName":172,"avatarUrl":173,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":174,"repoCount":175,"professionCount":176,"scenarioCount":108,"totalStars":177,"updatedAt":178},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,187999,"2026-11-12 03:17:01",{"accountNo":180,"login":181,"displayName":182,"avatarUrl":183,"accountType":184,"accountTypeDesc":185,"profileDescription":186,"skillCount":187,"repoCount":188,"professionCount":127,"scenarioCount":108,"totalStars":189,"updatedAt":190},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174404,"2026-11-12 05:14:59",1905,9,{"skillCount":194,"professionCount":107,"scenarioCount":108,"creatorCount":191},196628,{"records":196,"total":194,"current":567,"size":568},[197,239,264,287,306,323,343,363,379,393,407,427,442,459,477,496,517,540],{"skillNo":198,"name":199,"nameZh":13,"description":200,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":209,"categories":210,"keywords":217,"publishedAt":238},"01M6AGBJTRWM2P7NHFSWQK53HK","testing-for-xml-injection-vulnerabilities","Test web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks to identify data exposure and server-side request forgery risks.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35925,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-xml-injection-vulnerabilities\u002FSKILL.md",[211,214],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000023","Skill与智能体开发",[218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237],"testing","vulnerabilities","xml","injection","testing for xml injection vulnerabilities","security","cybersecurity","pr","server","data","web-application-security","t1505","application-security","parsing","xml-injection","xxe","xpath-injection","xml-parsing","entity-injection","dtd-attack","2026-11-10 10:12:30",{"skillNo":240,"name":241,"nameZh":13,"description":242,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":243,"categories":244,"keywords":247,"publishedAt":238},"01M6AGBF26ZTD0701FX84KJW5X","testing-for-system-prompt-leakage","Extracts LLM system prompts using direct requests, jailbreak\u002Finstruction-override framing, translation\u002Fencoding tricks, and few-shot replay, combining manual payloads with automated garak and Promptfoo scanners to surface embedded secrets, routing logic, and policy leakage (OWASP LLM07:2025). Use during LLM application red-team engagements or when validating that no credentials or authorization logic live in the system prompt.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-system-prompt-leakage\u002FSKILL.md",[245,246],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,248,223,249,224,250,251,227,252,253,254,255,256,257,258,259,260,261,262,263],"testing for system prompt leakage","policy","routing","red-team","ai-security","owasp","promptfoo","jailbreak","credentials","secrets","garak","data-leakage","system-prompt-leakage","prompt-extraction","llm-red-team","owasp-llm07",{"skillNo":265,"name":266,"nameZh":13,"description":267,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":268,"categories":269,"keywords":277,"publishedAt":238},"01M6AGBBHZ9TH9YVD5CX4SRJS3","testing-for-sensitive-data-exposure","Identifying sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-sensitive-data-exposure\u002FSKILL.md",[270,271,274,275,276],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":272,"categoryName":273,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":23,"categoryName":24,"taxonomyType":6,"taxonomyTypeDesc":7},[218,227,278,223,224,219,279,280,225,253,228,281,282,283,229,284,285,230,286,257],"testing for sensitive data exposure","storage","web","t1059","data-exposure","web-security","api-keys","pii","api",{"skillNo":288,"name":289,"nameZh":13,"description":290,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":291,"categories":292,"keywords":295,"publishedAt":238},"01M6AGB74FQRP5NVAMHM2VNA9Z","testing-for-open-redirect-vulnerabilities","Identifies and exploits open redirect vulnerabilities by analyzing URL redirection parameters (next, url, redirect, return, goto), applying bypass techniques, and chaining findings into phishing or token-theft exploits, using Burp Suite\u002FOWASP ZAP and Burp Collaborator. Use when testing login\u002Flogout flows, OAuth redirect_uri handling, or SSO redirect validation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-open-redirect-vulnerabilities\u002FSKILL.md",[293,294],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,219,296,223,224,225,297,298,299,253,228,281,300,229,230,301,302,303,304,305],"testing for open redirect vulnerabilities","analyzing","OAuth","sso","t1566","open-redirect","url-redirect","url-validation","redirect-bypass","unvalidated-redirect",{"skillNo":307,"name":308,"nameZh":13,"description":309,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":310,"categories":311,"keywords":314,"publishedAt":238},"01M6AGB3GFPDADE5QFZZ9BNG58","testing-for-json-web-token-vulnerabilities","Tests JWT implementations for algorithm confusion, \"none\" algorithm bypass, kid\u002Fjku parameter injection, and weak secret exploitation using jwt_tool and Burp Suite's JWT Editor extension, aiming to achieve authentication bypass and privilege escalation. Use when assessing JWT-based auth\u002Fsession management, OAuth2\u002FOIDC token handling, or SSO systems during a security engagement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-json-web-token-vulnerabilities\u002FSKILL.md",[312,313],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,219,280,315,223,224,316,225,317,299,318,319,228,281,221,229,230,320,321,322],"testing for json web token vulnerabilities","auth","authentication","escalation","authentication-bypass","json-web-token","kid-injection","jku-attack",{"skillNo":324,"name":325,"nameZh":13,"description":326,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":327,"categories":328,"keywords":331,"publishedAt":238},"01M6AGAZYHB6DB26WGY5546P9C","testing-for-host-header-injection","Test web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-host-header-injection\u002FSKILL.md",[329,330],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,221,332,223,224,333,225,334,335,228,281,229,336,230,337,338,339,340,341,342],"testing for host header injection","http","cache","ssrf","applications","cache-poisoning","header-injection","host-header-injection","password-reset-poisoning","virtual-host","header-manipulation",{"skillNo":344,"name":345,"nameZh":13,"description":346,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":347,"categories":348,"keywords":354,"publishedAt":238},"01M6AGAW1B00JCV7Y07F53KE41","testing-for-email-header-injection","Tests web application email functionality (contact forms, password reset, newsletter subscriptions) for CRLF\u002FSMTP header injection using Burp Suite and OWASP ZAP, checking whether attackers can inject headers, modify recipients, or abuse forms for spam relay. Use when testing any user-input-driven email-sending feature during a penetration test.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-email-header-injection\u002FSKILL.md",[349,352,353],{"categoryNo":350,"categoryName":351,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000005","邮件与沟通",{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,355,221,356,223,224,357,280,225,358,253,228,281,229,230,359,360,338,361,362],"email","testing for email header injection","test","email-security","smtp-injection","crlf-injection","spam-relay","contact-form",{"skillNo":364,"name":365,"nameZh":13,"description":366,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":367,"categories":368,"keywords":371,"publishedAt":238},"01M6AGAR640J8Z927N9A5MC81G","testing-for-business-logic-vulnerabilities","Manually identifies flaws in application business logic - price manipulation, multi-step workflow bypass, and privilege escalation - by intercepting and modifying requests with Burp Suite, going beyond what automated vulnerability scanners detect. Use for e-commerce checkout\u002Fcart flows, voucher and rewards systems, or any assessment where scanners find little but business rules need scrutiny.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-business-logic-vulnerabilities\u002FSKILL.md",[369,370],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,219,372,223,224,373,280,225,374,375,318,253,228,281,283,376,229,230,377,378],"testing for business logic vulnerabilities","workflow","assessment","penetration-testing","burpsuite","vulnerability","web-application",{"skillNo":380,"name":381,"nameZh":13,"description":382,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":383,"categories":384,"keywords":387,"publishedAt":238},"01M6AGAMF5YXN0QGBC6QZMCN9R","testing-for-broken-access-control","Systematically tests web applications and APIs for broken access control (OWASP A01:2021), including privilege escalation, missing function-level checks, insecure direct object references, and multi-tenant data leakage, using Burp Suite with the Authorize extension. Use during authorized penetration tests or RBAC\u002Fmulti-tenant authorization audits.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-broken-access-control\u002FSKILL.md",[385,386],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,388,223,224,280,389,225,390,375,227,391,318,253,392,228,281,283,229,336,230],"testing for broken access control","rbac","privilege-escalation","access-control","authorization",{"skillNo":394,"name":395,"nameZh":13,"description":396,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":397,"categories":398,"keywords":401,"publishedAt":238},"01M6AGAH1D44PF8MH1V2ATJK0D","testing-cors-misconfiguration","Identifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data access and credential theft during security assessments.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-cors-misconfiguration\u002FSKILL.md",[399,400],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,402,403,223,249,224,280,225,375,227,404,253,405,228,281,283,376,229,230,406],"misconfiguration","testing cors misconfiguration","sharing","t1003","cors",{"skillNo":408,"name":409,"nameZh":13,"description":410,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":411,"categories":412,"keywords":417,"publishedAt":238},"01M6AGAD8AD6HPYHAAWKX9QRTE","testing-api-security-with-owasp-top-10","Systematically assesses REST, GraphQL, and gRPC API endpoints against the OWASP API Security Top 10 (2023) using Burp Suite and Postman for automated and manual testing. Use during authorized API penetration tests, before deploying new endpoints to production, or when validating API gateway controls and rate limiting.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-api-security-with-owasp-top-10\u002FSKILL.md",[413,414,415,416],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":272,"categoryName":273,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[218,223,418,253,286,419,224,225,420,421,422,423,424,228,281,376,425,229,230,426],"owasp top 10","testing api security with owasp top 10","api gateway","gateway","grpc","api-security","REST","rest-api","postman",{"skillNo":428,"name":429,"nameZh":13,"description":430,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":431,"categories":432,"keywords":437,"publishedAt":238},"01M6AGA9B0MPFH44KVMNDV26X2","testing-api-for-mass-assignment-vulnerability","Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifying writable endpoints, adding undocumented fields to request bodies (role, isAdmin, price, balance), and checking whether the server binds them to the data model without filtering. Use when testing an API for mass assignment, parameter binding abuse, or over-posting on profile, registration, or object-creation endpoints.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-api-for-mass-assignment-vulnerability\u002FSKILL.md",[433,434,435,436],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":272,"categoryName":273,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[218,377,286,438,223,224,225,226,423,227,253,439,281,440,441],"testing api for mass assignment vulnerability","mass-assignment","auto-binding","parameter-tampering",{"skillNo":443,"name":444,"nameZh":13,"description":445,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":446,"categories":447,"keywords":452,"publishedAt":238},"01M6AGA5YQ1V0VY2P0XXWFPMFC","testing-api-for-broken-object-level-authorization","Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA\u002FIDOR, OWASP API1:2023) by intercepting API calls, identifying object ID parameters (numeric IDs, UUIDs, slugs), and systematically substituting IDs belonging to other users to check whether the server enforces per-object authorization. Use when asked to test BOLA or IDOR in an API, verify object-level authorization, or assess an API for access control bypass.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-api-for-broken-object-level-authorization\u002FSKILL.md",[448,449,450,451],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":272,"categoryName":273,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[218,392,286,453,223,224,357,225,226,423,253,424,454,455,456,457,281,458],"testing api for broken object level authorization","GraphQL","ids","bola","idor","rest-security",{"skillNo":460,"name":461,"nameZh":13,"description":462,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":463,"categories":464,"keywords":469,"publishedAt":238},"01M6AGA2CP0N9XGPF8DRPPHVGM","testing-api-authentication-weaknesses","Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses. Maps to OWASP API2:2023 Broken Authentication. Activates for requests involving API authentication testing, token validation assessment, credential security testing, or API auth bypass.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-api-authentication-weaknesses\u002FSKILL.md",[465,466,467,468],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":272,"categoryName":273,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[218,317,286,470,223,224,316,225,374,471,472,423,298,253,405,473,281,474,475,476],"testing api authentication weaknesses","validation","logs","entropy","session-management","broken authentication","credential-security",{"skillNo":478,"name":479,"nameZh":13,"description":480,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":481,"categories":482,"keywords":485,"publishedAt":238},"01M6AG9YGJVJ30HWP0HTQES0GH","testing-android-intents-for-vulnerabilities","Tests Android inter-process communication (IPC) through intents for vulnerabilities including intent injection, unauthorized component access, broadcast sniffing, pending intent hijacking, and content provider data leakage. Use when assessing Android app attack surface through exported components, testing intent-based data flows, or evaluating IPC security. Activates for requests involving Android intent security, IPC testing, exported component analysis, or Drozer assessment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-android-intents-for-vulnerabilities\u002FSKILL.md",[483,484],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[218,486,219,487,223,224,488,489,225,374,490,491,227,253,492,281,221,493,494,495],"android","testing android intents for vulnerabilities","components","component","communication","mobile-security","t1078","analysis","intents","ipc-security",{"skillNo":497,"name":498,"nameZh":13,"description":499,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":500,"categories":501,"keywords":503,"publishedAt":238},"01M6AG9TWXJ04VXE1GA0KANTTH","securing-serverless-functions","Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions): least-privilege IAM roles, dependency vulnerability scanning, secrets management integration, input validation, function URL authentication, and runtime monitoring. Use when deploying serverless functions with sensitive access, auditing for overly permissive roles, or adding functions to a DevSecOps pipeline.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-serverless-functions\u002FSKILL.md",[502],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[504,505,142,506,507,223,224,317,508,509,510,511,512,513,514,492,515,377,257,516],"serverless","securing serverless functions","google cloud","devsecops","monitoring","cloud-security","iam","least-privilege","pipeline","lambda","serverless-security","secrets management","azure-functions",{"skillNo":518,"name":519,"nameZh":13,"description":520,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":521,"categories":522,"keywords":525,"publishedAt":238},"01M6AG9QBYY4Q5FAEKWQFZQWAB","securing-remote-access-to-ot-environment","Designs and configures secure remote access to OT\u002FICS environments for operators, engineers, and vendors: jump server architecture, multi-factor authentication, session recording, privileged access management, vendor access controls, and IEC 62443 \u002F NERC CIP-005 compliance. Use when designing OT remote access architecture or configuring a jump server with privileged access management.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-remote-access-to-ot-environment\u002FSKILL.md",[523,524],{"categoryNo":272,"categoryName":273,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[526,224,527,528,225,317,226,529,530,531,532,533,534,535,536,492,281,537,538,539],"securing remote access to ot environment","architecture","secure","compliance","mfa","multi-factor","ot-security","ics","scada","industrial-control","iec62443","remote-access","jump-server","ICS-security",{"skillNo":541,"name":542,"nameZh":13,"description":543,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":544,"categories":545,"keywords":553,"publishedAt":238},"01M6AG9KVHV1SW17QKPGRWC855","securing-kubernetes-on-cloud","Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity (IRSA for EKS, Workload Identity for GKE, Managed Identities for AKS), RBAC scoping, image admission controls, and runtime security monitoring. Use when deploying a new managed Kubernetes cluster with security requirements or hardening an existing EKS, AKS, or GKE cluster after an audit or pentest finding.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-kubernetes-on-cloud\u002FSKILL.md",[546,549,552],{"categoryNo":547,"categoryName":548,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":550,"categoryName":551,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[554,555,556,557,223,224,558,559,389,225,560,508,509,561,562,563,564,492,565,566],"kubernetes","cloud","securing kubernetes on cloud","image","identity","workload","audit","network","eks","gke","aks","security-standards","pod-security-standards",84,18]