[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:sce6":3,"skills:pro6":50,"skills:stats":95,"skills:creators9":100,"skills:all:stars:85:":195},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",1,39462,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26546,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13572,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6291,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6033,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",13276,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7776,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3449,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3317,[],{"skillCount":96,"professionCount":97,"scenarioCount":98,"creatorCount":99},196628,11,7,1905,{"records":101,"total":99,"current":11,"size":194},[102,114,123,133,143,153,163,172,182],{"accountNo":103,"login":104,"displayName":105,"avatarUrl":106,"accountType":107,"accountTypeDesc":108,"profileDescription":109,"skillCount":110,"repoCount":111,"professionCount":97,"scenarioCount":98,"totalStars":112,"updatedAt":113},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4166,229,828075,"2026-11-12 04:48:47",{"accountNo":115,"login":116,"displayName":116,"avatarUrl":117,"accountType":107,"accountTypeDesc":108,"profileDescription":118,"skillCount":119,"repoCount":120,"professionCount":98,"scenarioCount":98,"totalStars":121,"updatedAt":122},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437637,"2026-11-12 03:04:11",{"accountNo":124,"login":125,"displayName":126,"avatarUrl":127,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":128,"repoCount":129,"professionCount":98,"scenarioCount":130,"totalStars":131,"updatedAt":132},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,341786,"2026-11-12 03:20:15",{"accountNo":134,"login":135,"displayName":136,"avatarUrl":137,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":138,"repoCount":139,"professionCount":140,"scenarioCount":98,"totalStars":141,"updatedAt":142},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298091,"2026-11-12 05:32:19",{"accountNo":144,"login":145,"displayName":146,"avatarUrl":147,"accountType":107,"accountTypeDesc":108,"profileDescription":148,"skillCount":149,"repoCount":150,"professionCount":97,"scenarioCount":98,"totalStars":151,"updatedAt":152},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,241637,"2026-11-12 03:57:04",{"accountNo":154,"login":155,"displayName":156,"avatarUrl":157,"accountType":107,"accountTypeDesc":108,"profileDescription":158,"skillCount":159,"repoCount":160,"professionCount":97,"scenarioCount":98,"totalStars":161,"updatedAt":162},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",936,27,238133,"2026-11-12 03:23:28",{"accountNo":164,"login":165,"displayName":166,"avatarUrl":167,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":168,"repoCount":169,"professionCount":97,"scenarioCount":98,"totalStars":170,"updatedAt":171},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231455,"2026-11-12 03:40:35",{"accountNo":173,"login":174,"displayName":175,"avatarUrl":176,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":177,"repoCount":178,"professionCount":179,"scenarioCount":98,"totalStars":180,"updatedAt":181},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,187999,"2026-11-12 03:17:01",{"accountNo":183,"login":184,"displayName":185,"avatarUrl":186,"accountType":187,"accountTypeDesc":188,"profileDescription":189,"skillCount":190,"repoCount":191,"professionCount":130,"scenarioCount":98,"totalStars":192,"updatedAt":193},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174404,"2026-11-12 05:14:59",9,{"records":196,"total":96,"current":570,"size":571},[197,240,271,290,311,330,350,370,388,410,430,454,470,487,505,520,532,546],{"skillNo":198,"name":199,"nameZh":13,"description":200,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":209,"categories":210,"keywords":218,"publishedAt":239},"01M6AG9FY71W57B5J77H22DYK2","securing-historian-server-in-ot-environment","Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT environments: Purdue-level network placement, interface access control, secure DMZ replication via data diodes or PI-to-PI connectors, SQL injection prevention, and process data integrity. Use when auditing or hardening a historian server, or designing secure OT-to-IT data replication through a DMZ.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35925,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-historian-server-in-ot-environment\u002FSKILL.md",[211,214,217],{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":68,"categoryName":69,"taxonomyType":53,"taxonomyTypeDesc":54},[219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238],"server","historian","securing historian server in ot environment","security","cybersecurity","sql","secure","pr","network","data","ot-security","osisoft-pi","data-integrity","t1078","t1059","injection","prevention","integrity","dmz","ICS-security","2026-11-10 10:12:30",{"skillNo":241,"name":242,"nameZh":13,"description":243,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":244,"categories":245,"keywords":253,"publishedAt":239},"01M6AG9BVDC96VHN5HBP0KKQ04","securing-helm-chart-deployments","Secures Helm chart deployments by verifying chart signatures and provenance, rendering and linting templates for misconfiguration, enforcing pod security contexts through values.yaml, moving secrets into an external store instead of Helm values, and scoping RBAC for Helm operations in CI\u002FCD. Use when deploying charts to Kubernetes or reviewing chart provenance, templates, or release RBAC. Keywords: Helm, provenance file, helm verify, helm lint, values.yaml, Tiller-less, release RBAC, external secrets. Do not use for scanning the rendered manifests themselves - use scanning-kubernetes-manifests-with-kubesec.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-helm-chart-deployments\u002FSKILL.md",[246,249,252],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":250,"categoryName":251,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000013","分析与可视化",{"categoryNo":68,"categoryName":69,"taxonomyType":53,"taxonomyTypeDesc":54},[254,255,222,223,256,226,257,258,259,260,261,262,263,264,265,266,267,268,269,270],"securing helm chart deployments","kubernetes","rbac","deployment","lint","release","file","ci","container-security","supply-chain","t1195","misconfiguration","provenance","secrets","Charts","kubesec","helm",{"skillNo":272,"name":273,"nameZh":13,"description":274,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":275,"categories":276,"keywords":279,"publishedAt":239},"01M6AG982M06YXD8S687RQDCV9","securing-github-actions-workflows","Hardens GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation: pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets, preventing script injection in workflow expressions, and requiring reviewers for workflow changes. Use when hardening GitHub Actions workflows that handle secrets, deploy to production, or run with elevated permissions.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-github-actions-workflows\u002FSKILL.md",[277,278],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[155,280,281,282,283,284,222,223,285,225,226,286,287,263,288,289,233,234,264,267],"workflows","actions","github actions","securing github actions workflows","devsecops","workflow","run","permissions","escalation","github-actions",{"skillNo":291,"name":292,"nameZh":13,"description":293,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":294,"categories":295,"keywords":298,"publishedAt":239},"01M6AG93RBGAY0NGQWNS3C6307","securing-container-registry-with-harbor","Configures the security features of the Harbor open-source container registry - integrated Trivy scanning, Cosign and Notary content trust policies, project-level RBAC, immutable tag and retention rules, and OIDC authentication - to enforce provenance and block deployment of vulnerable images. Use when deploying or hardening Harbor, or when compliance requires that only signed and scanned images can be pulled. Keywords: Harbor, project policy, content trust, immutable tag, retention, robot account, OIDC, replication. Do not use for signing images with Cosign outside a registry - use implementing-image-provenance-verification-with-cosign.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-container-registry-with-harbor\u002FSKILL.md",[296,297],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[299,300,301,302,303,255,222,304,223,256,226,257,305,306,307,262,308,266,309,310],"registry","securing container registry with harbor","image","containers","docker","policy","authentication","verification","compliance","cosign","immutable","harbor",{"skillNo":312,"name":313,"nameZh":13,"description":314,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":315,"categories":316,"keywords":322,"publishedAt":239},"01M6AG90887XYBAP72RK1VHXWG","securing-container-registry-images","Secures container registry images (ECR, ACR, GCR, Docker Hub) by scanning with Trivy and Grype, signing with Cosign and Sigstore, configuring registry access controls, and building CI\u002FCD pipelines that block unscanned or unsigned images. Use when establishing registry security controls or enforcing scan\u002Fsignature checks before image promotion.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-container-registry-images\u002FSKILL.md",[317,318,321],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":319,"categoryName":320,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[299,323,301,302,303,222,223,226,324,261,325,263,326,232,327,328,308,329],"securing container registry images","cloud","cloud-security","grype","trivy","sigstore","image-scanning",{"skillNo":331,"name":332,"nameZh":13,"description":333,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":334,"categories":335,"keywords":337,"publishedAt":239},"01M6AG8WAGWE5XWNECWNFZF5M1","securing-azure-with-microsoft-defender","Deploys and configures Microsoft Defender for Cloud as a CNAPP for Azure, multi-cloud, and hybrid environments: enabling Defender plans for servers, containers, storage, and databases, configuring recommendations, and managing Secure Score via the unified Defender portal. Use when onboarding workloads to Defender for Cloud or setting up cloud workload protection and threat monitoring.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-azure-with-microsoft-defender\u002FSKILL.md",[336],{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[104,338,339,340,302,222,223,341,342,225,226,343,325,344,232,345,346,347,348,349],"defender","azure","securing azure with microsoft defender","storage","workload","monitoring","Microsoft-Defender","multi-cloud","cnapp","azure-security","secure-score","cloud-workload-protection",{"skillNo":351,"name":352,"nameZh":13,"description":353,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":354,"categories":355,"keywords":357,"publishedAt":239},"01M6AG8RG7KY4JGQVQVKD88QAN","securing-aws-lambda-execution-roles","Hardens AWS Lambda execution roles by writing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, validating permissions with IAM Access Analyzer, and enforcing role scoping through SCPs. Use when deploying new Lambda functions, remediating overly permissive Lambda roles found in an audit, or building reusable least-privilege IAM role templates for serverless teams.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-aws-lambda-execution-roles\u002FSKILL.md",[356],{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[358,359,360,361,362,222,223,226,363,287,364,324,325,365,366,367,232,368,369],"aws","lambda","execution","securing aws lambda execution roles","writing","teams","audit","iam","least-privilege","templates","serverless","execution-roles",{"skillNo":371,"name":372,"nameZh":13,"description":373,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":374,"categories":375,"keywords":378,"publishedAt":239},"01M6AG8MVZES5MFDS9CG5GAWAZ","securing-aws-iam-permissions","Hardens AWS IAM configurations to enforce least-privilege access, covering IAM policy scoping, permission boundaries, IAM Access Analyzer integration, and credential rotation strategies. Use when reducing the blast radius of compromised AWS identities, auditing overly permissive IAM policies, or setting up permission boundaries and Access Analyzer findings review across cloud accounts.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-aws-iam-permissions\u002FSKILL.md",[376,377],{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":52,"categoryName":55,"taxonomyType":53,"taxonomyTypeDesc":54},[287,358,365,379,380,222,304,223,381,382,226,305,325,366,383,232,384,385,386,387],"securing aws iam permissions","review","change","identity","t1003","initial-access","permission-boundaries","radius","api",{"skillNo":389,"name":390,"nameZh":13,"description":391,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":392,"categories":393,"keywords":397,"publishedAt":239},"01M6AG8HB66CBZHZ0K8F4RECR6","securing-api-gateway-with-aws-waf","Secures AWS API Gateway endpoints with AWS WAF by configuring managed rule groups for OWASP Top 10 protection, custom rate-limiting rules, bot control, IP reputation filtering, and WAF metric monitoring. Use when deploying API Gateway endpoints that need protection against common web attacks, or when implementing rate limiting and throttling to prevent API abuse and DDoS.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-api-gateway-with-aws-waf\u002FSKILL.md",[394,395,396],{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":52,"categoryName":55,"taxonomyType":53,"taxonomyTypeDesc":54},[398,399,400,358,387,401,402,222,223,403,226,404,343,325,405,232,406,407,408,409],"api gateway","gateway","waf","securing api gateway with aws waf","bot","web","owasp top 10","owasp","api-gateway","throttling","ddos","bot-protection",{"skillNo":411,"name":412,"nameZh":13,"description":413,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":414,"categories":415,"keywords":417,"publishedAt":239},"01M6AG8DEXPBTHQ6PBZZ60BZH0","securing-agentic-ai-tool-invocation","Implements defense-in-depth controls at an AI agent's tool-invocation boundary using tool allowlisting, least-privilege identity binding, NeMo Guardrails policy enforcement, human-in-the-loop approval, and audit logging. Use when hardening an agent that calls tools with real side effects (email, payments, file writes, code execution), mapping OWASP Agentic AI Top 10 controls, or bounding prompt-injection blast radius.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-agentic-ai-tool-invocation\u002FSKILL.md",[416],{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[418,419,420,222,223,421,382,422,423,364,424,425,366,426,427,405,428,429,234,386],"agentic","agentic ai","securing agentic ai tool invocation","ai agent","owasp agentic","code","payments","defense-in-depth","Guardrails","NeMo Guardrails","defense","Tools",{"skillNo":431,"name":432,"nameZh":13,"description":433,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":434,"categories":435,"keywords":437,"publishedAt":239},"01M6AG89XD72CVRKBZQ7VBB9BA","scanning-network-with-nmap-advanced","Performs advanced network recon using Nmap's Scripting Engine (NSE), timing controls, firewall\u002FIDS evasion, and structured output parsing to discover hosts, enumerate service versions, detect vulnerabilities, and fingerprint OSes. Use during authorized penetration tests or enterprise asset-discovery assessments needing scan evasion, NSE vulnerability checks, or output fed into a vulnerability management pipeline.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fscanning-network-with-nmap-advanced\u002FSKILL.md",[436],{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[227,438,439,222,223,226,440,441,442,443,444,445,446,447,448,449,450,451,452,453],"Nmap","scanning network with nmap advanced","vulnerability management","Enterprise","network-security","pipeline","reconnaissance","firewall","ids","port-scanning","asset-discovery","evasion","vulnerability","parsing","discovery","service-enumeration",{"skillNo":455,"name":456,"nameZh":13,"description":457,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":458,"categories":459,"keywords":461,"publishedAt":239},"01M6AG85V9JEMBB8PZYKZS37CA","scanning-kubernetes-manifests-with-kubesec","Scores Kubernetes resource manifests with Kubesec to flag misconfiguration and privilege-escalation risk before deployment, mapping each finding back to the securityContext change that fixes it. Use when gating manifests in CI, reviewing YAML or a rendered chart before it reaches a cluster, or explaining why a manifest scored negatively. Keywords: Kubesec, manifest score, securityContext, readOnlyRootFilesystem, runAsNonRoot, CI gate. Do not use for scanning built images for CVEs - use scanning-docker-images-with-trivy; for admission-time enforcement use implementing-opa-gatekeeper-for-policy-enforcement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fscanning-kubernetes-manifests-with-kubesec\u002FSKILL.md",[460],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},[255,462,303,284,222,223,381,226,257,463,261,464,262,288,465,466,467,269,468,469],"scanning kubernetes manifests with kubesec","opa","static-analysis","ci-cd","risk","analysis","manifest-scanning","security-scanning",{"skillNo":471,"name":472,"nameZh":13,"description":473,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":474,"categories":475,"keywords":477,"publishedAt":239},"01M6AG821HS7A7KNPJEKCQ3KBC","scanning-infrastructure-with-nessus","Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fscanning-infrastructure-with-nessus\u002FSKILL.md",[476],{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[478,479,480,222,223,481,227,482,466,483,484,450,485,486],"infrastructure","nessus","scanning infrastructure with nessus","cve","vulnerability-management","devices","tenable","vulnerability scanner","infrastructure-scanning",{"skillNo":488,"name":489,"nameZh":13,"description":490,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":491,"categories":492,"keywords":496,"publishedAt":239},"01M6AG7Y300YF9S175PW635J1E","scanning-iac-and-images-with-trivy","Scans container images, Infrastructure-as-Code (Terraform, CloudFormation, Kubernetes manifests, Dockerfile, Helm), filesystems, git repos, and SBOMs with Trivy's vuln, misconfig, secret, and license scanners. Use when building a CI\u002FCD security gate that scans images before push, IaC before apply, or SBOMs for supply-chain weaknesses, and fails the build on policy violations.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fscanning-iac-and-images-with-trivy\u002FSKILL.md",[493,494,495],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":52,"categoryName":55,"taxonomyType":53,"taxonomyTypeDesc":54},[327,497,284,222,304,223,498,499,478,423,500,501,261,262,502,263,503,504,465,450],"scanning iac and images with trivy","repos","dockerfile","git","push","SBOM","infrastructure-as-code","vulnerability-scanning",{"skillNo":506,"name":507,"nameZh":13,"description":508,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":509,"categories":510,"keywords":514,"publishedAt":239},"01M6AG7T434YT4EZ3KWEM7VVXE","scanning-docker-images-with-trivy","Scans a Docker image with Trivy for vulnerabilities in OS packages and language dependencies, misconfiguration, exposed secrets, and licence violations, emitting SARIF, CycloneDX, or SPDX output. Use when scanning or gating a specific image, wiring an image scan into CI\u002FCD, or checking an image during an incident investigation. Keywords: Trivy, image scan, --severity, --exit-code, SARIF, ignore file, .trivyignore. Do not use for cluster-wide scanning or non-image targets - use performing-container-security-scanning-with-trivy; when the toolchain is Grype use scanning-container-images-with-grype.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fscanning-docker-images-with-trivy\u002FSKILL.md",[511,512,513],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":319,"categoryName":320,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[303,327,515,301,302,222,223,226,516,423,260,261,262,517,518,326,519,504,450,267],"scanning docker images with trivy","packages","CycloneDX","SPDX","severity",{"skillNo":521,"name":522,"nameZh":13,"description":523,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":524,"categories":525,"keywords":528,"publishedAt":239},"01M6AG7PD50S23X81P9N2HDK0N","scanning-containers-with-trivy-in-cicd","Integrates Aqua Security's Trivy scanner into CI\u002FCD pipelines to detect OS package and application dependency CVEs, Dockerfile misconfigurations, and issues in filesystems or git repositories, and to enforce severity-based quality gates that block vulnerable images from being deployed. Use when building Docker images in CI\u002FCD and needing automated vulnerability scanning and pass\u002Ffail gates before registry push or production deployment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fscanning-containers-with-trivy-in-cicd\u002FSKILL.md",[526,527],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[302,327,529,530,284,222,223,499,225,226,500,299,531,501,261,262,519,504,264,450],"cicd","scanning containers with trivy in cicd","issues",{"skillNo":533,"name":534,"nameZh":13,"description":535,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":536,"categories":537,"keywords":539,"publishedAt":239},"01M6AG7JG4YJZCBR8R210E2XPX","scanning-container-images-with-grype","Scans container images, filesystems, and SBOMs for known CVEs with Anchore Grype, matching Syft-generated SBOM packages against NVD, GitHub Advisories, and OS-specific feeds with configurable severity thresholds and failure gates. Use when Grype or Syft is the chosen toolchain, when scanning an existing SBOM rather than an image, or when gating a build on severity. Keywords: Grype, Syft, SBOM, NVD, GitHub Advisory, --fail-on, severity threshold. Do not use when the toolchain is Trivy - use scanning-docker-images-with-trivy.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fscanning-container-images-with-grype\u002FSKILL.md",[538],{"categoryNo":247,"categoryName":248,"taxonomyType":6,"taxonomyTypeDesc":7},[540,326,541,301,303,222,223,226,516,262,502,542,263,543,519,544,504,264,450,545],"container images","scanning container images with grype","NVD","syft","feeds","anchore",{"skillNo":547,"name":548,"nameZh":13,"description":549,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":550,"categories":551,"keywords":553,"publishedAt":239},"01M6AG7ETGBBV7GNV3V9EKXBAC","reverse-engineering-rust-malware","Reverse engineers Rust-compiled malware using IDA Pro and Ghidra, covering techniques for non-null-terminated fat-pointer strings, monomorphized\u002Fduplicated generic code, Result\u002FOption unwrap chains, crate dependency extraction, and Rust-specific control flow and calling conventions. Use when analyzing Rust-based malware samples (e.g. BlackCat\u002FALPHV, Hive, Buer Loader) or attack artifacts in an authorized, controlled environment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Freverse-engineering-rust-malware\u002FSKILL.md",[552],{"categoryNo":215,"categoryName":216,"taxonomyType":6,"taxonomyTypeDesc":7},[554,555,556,557,223,423,558,559,560,561,562,563,564,565,566,567,467,568,569],"rust","engineering","malware","reverse engineering rust malware","artifacts","extraction","hive","reverse-engineering","malware-analysis","ghidra","binary-analysis","analyzing","flow","t1055","ida-pro","rust-malware",85,18]