[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:sce6":3,"skills:pro6":50,"skills:creators9":95,"skills:stats":193,"skills:all:stars:87:":195},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",1,39462,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26545,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13571,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6291,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6033,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",13275,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7775,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3449,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3317,[],{"records":96,"total":191,"current":11,"size":192},[97,111,120,130,140,150,160,169,179],{"accountNo":98,"login":99,"displayName":100,"avatarUrl":101,"accountType":102,"accountTypeDesc":103,"profileDescription":104,"skillCount":105,"repoCount":106,"professionCount":107,"scenarioCount":108,"totalStars":109,"updatedAt":110},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,11,7,828730,"2026-11-13 03:12:52",{"accountNo":112,"login":113,"displayName":113,"avatarUrl":114,"accountType":102,"accountTypeDesc":103,"profileDescription":115,"skillCount":116,"repoCount":117,"professionCount":108,"scenarioCount":108,"totalStars":118,"updatedAt":119},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":121,"login":122,"displayName":123,"avatarUrl":124,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":125,"repoCount":126,"professionCount":108,"scenarioCount":127,"totalStars":128,"updatedAt":129},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342692,"2026-11-13 03:15:50",{"accountNo":131,"login":132,"displayName":133,"avatarUrl":134,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":135,"repoCount":136,"professionCount":137,"scenarioCount":108,"totalStars":138,"updatedAt":139},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":141,"login":142,"displayName":143,"avatarUrl":144,"accountType":102,"accountTypeDesc":103,"profileDescription":145,"skillCount":146,"repoCount":147,"professionCount":107,"scenarioCount":108,"totalStars":148,"updatedAt":149},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242350,"2026-11-13 03:05:39",{"accountNo":151,"login":152,"displayName":153,"avatarUrl":154,"accountType":102,"accountTypeDesc":103,"profileDescription":155,"skillCount":156,"repoCount":157,"professionCount":107,"scenarioCount":108,"totalStars":158,"updatedAt":159},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",936,27,238434,"2026-11-13 03:17:57",{"accountNo":161,"login":162,"displayName":163,"avatarUrl":164,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":165,"repoCount":166,"professionCount":107,"scenarioCount":108,"totalStars":167,"updatedAt":168},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231455,"2026-11-12 03:40:35",{"accountNo":170,"login":171,"displayName":172,"avatarUrl":173,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":174,"repoCount":175,"professionCount":176,"scenarioCount":108,"totalStars":177,"updatedAt":178},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":180,"login":181,"displayName":182,"avatarUrl":183,"accountType":184,"accountTypeDesc":185,"profileDescription":186,"skillCount":187,"repoCount":188,"professionCount":127,"scenarioCount":108,"totalStars":189,"updatedAt":190},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174404,"2026-11-12 05:14:59",1905,9,{"skillCount":194,"professionCount":107,"scenarioCount":108,"creatorCount":191},196622,{"records":196,"total":194,"current":592,"size":593},[197,229,257,278,301,324,341,358,375,393,419,444,475,495,519,539,554,572],{"skillNo":198,"name":199,"nameZh":13,"description":200,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":209,"categories":210,"keywords":214,"publishedAt":228},"01M6AG5A6QVMG6BAKZFRZRCSJA","performing-wifi-password-cracking-with-aircrack","Captures WPA\u002FWPA2 handshakes and performs offline password cracking using aircrack-ng, hashcat, and dictionary attacks during authorized wireless security assessments to evaluate passphrase strength and wireless network security posture.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-wifi-password-cracking-with-aircrack\u002FSKILL.md",[211],{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000023","Skill与智能体开发",[215,216,217,218,219,220,221,222,223,224,225,226,227],"performing wifi password cracking with aircrack","security","network security","cybersecurity","pr","offline","network","network-security","WPA2","wireless-security","hashcat","wifi","aircrack-ng","2026-11-10 10:12:30",{"skillNo":230,"name":231,"nameZh":13,"description":232,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":233,"categories":234,"keywords":239,"publishedAt":228},"01M6AG578F7HBJ16QZ4B07G2ND","performing-web-cache-poisoning-attack","Exploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-web-cache-poisoning-attack\u002FSKILL.md",[235,238],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[240,241,242,243,244,216,218,219,245,246,247,248,249,250,251,252,253,254,255,256],"web","cache","performing web cache poisoning attack","testing","malicious","content","cdn","penetration-testing","owasp","web-application-security","t1059","web-security","burpsuite","t1505","application-security","web-application","cache-poisoning",{"skillNo":258,"name":259,"nameZh":13,"description":260,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":261,"categories":262,"keywords":265,"publishedAt":228},"01M6AG538XPFVK2DRBHQR9R30K","performing-web-cache-deception-attack","Executes web cache deception attacks by exploiting path normalization discrepancies between CDN\u002Freverse-proxy caching layers (Cloudflare, Akamai, Varnish, Nginx) and origin servers to cache and retrieve sensitive authenticated content. Use when testing applications behind CDNs for cache-key misconfigurations, during bug bounty hunting on aggressively cached sites, or when assessing sensitive data exposure through cache layer misconfiguration.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-web-cache-deception-attack\u002FSKILL.md",[263,264],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[240,241,266,267,243,216,218,268,269,270,271,249,253,272,273,274,256,275,276,277],"deception","performing web cache deception attack","cloudflare","nginx","data","t1078","akamai","web-cache-deception","cdn-attack","path-normalization","cache-key","static-resource",{"skillNo":279,"name":280,"nameZh":13,"description":281,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":282,"categories":283,"keywords":284,"publishedAt":228},"01M6AG4ZSDXD56A3S12NJ5MEZ1","performing-web-application-vulnerability-triage","Triages web application vulnerability findings from DAST\u002FSAST scanners such as Burp Suite and ZAP, using the OWASP Risk Rating Methodology to confirm true positives, dismiss false positives, and prioritize remediation. Use when reviewing scanner output to reduce alert fatigue and rank vulnerabilities for development teams to fix.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-web-application-vulnerability-triage\u002FSKILL.md",[],[285,240,286,287,288,289,218,290,291,292,293,294,295,296,248,297,298,299,255,300],"triage","vulnerability triage","vulnerability","performing web application vulnerability triage","sast","vulnerabilities","development","teams","dast","methodology","vulnerability-management","remediation","burp-suite","risk","false-positive","vulnerability-triage",{"skillNo":302,"name":303,"nameZh":13,"description":304,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":305,"categories":306,"keywords":312,"publishedAt":228},"01M6AG4VZZFS8QVMCW2YMDNY2P","performing-web-application-scanning-with-nikto","Runs Nikto, an open-source web server and web application scanner, to test over 7,000 potentially dangerous files\u002Fprograms, check for outdated versions across 1,250+ servers, and identify XSS, SQL injection, misconfigurations, default credentials, and vulnerable CGI scripts. Use when performing web application vulnerability scanning, security assessments, scheduled security testing, or validating web server security controls.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-web-application-scanning-with-nikto\u002FSKILL.md",[307,308,311],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":309,"categoryName":310,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[240,313,243,216,218,314,315,316,317,318,295,248,319,320,298,321,287,322,323],"performing web application scanning with nikto","test","sql","vulnerability scanning","cve","server","injection","xss","credentials","nikto","web-scanning",{"skillNo":325,"name":326,"nameZh":13,"description":327,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":328,"categories":329,"keywords":332,"publishedAt":228},"01M6AG4RNB9D49AGCTAJG80RYX","performing-web-application-penetration-test","Performs systematic security testing of web applications following the OWASP Web Security Testing Guide (WSTG) methodology to identify vulnerabilities in authentication, authorization, input validation, session management, and business logic. The tester uses Burp Suite as the primary interception proxy alongside manual testing techniques to find flaws that automated scanners miss. Activates for requests involving web app pentest, OWASP testing, application security assessment, or web vulnerability testing.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-web-application-penetration-test\u002FSKILL.md",[330,331],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[314,240,333,243,334,216,218,290,335,336,337,338,248,271,250,297,339,254,287,340],"performing web application penetration test","application security","assessment","authentication","validation","proxy","applications","web security testing",{"skillNo":342,"name":343,"nameZh":13,"description":344,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":345,"categories":346,"keywords":350,"publishedAt":228},"01M6AG4MVCWXYKFX080YXZMFKT","performing-web-application-firewall-bypass","Bypasses Web Application Firewall protections using encoding tricks, HTTP method manipulation, parameter pollution, and payload obfuscation to smuggle SQL injection, XSS, and other exploit payloads past WAF detection rules. Use when a confirmed vulnerability is blocked by a WAF, during penetration tests or red team engagements requiring bypass of perimeter security controls, or when evaluating WAF rule effectiveness and bypass resistance.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-web-application-firewall-bypass\u002FSKILL.md",[347,348,349],{"categoryNo":309,"categoryName":310,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":68,"categoryName":69,"taxonomyType":53,"taxonomyTypeDesc":54},[240,351,352,216,218,315,353,219,354,355,249,250,319,251,320,356,253,254,357,287],"firewall","performing web application firewall bypass","http","waf","red team","SQL-injection","evasion",{"skillNo":359,"name":360,"nameZh":13,"description":361,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":362,"categories":363,"keywords":366,"publishedAt":228},"01M6AG4HRJ2TDGDG22J6VYAPH4","performing-vulnerability-scanning-with-nessus","Performs authenticated and unauthenticated vulnerability scanning using Tenable Nessus to identify known vulnerabilities, misconfigurations, default credentials, and missing patches across network infrastructure, servers, and applications. The scanner correlates findings with CVE databases and CVSS scores to produce prioritized remediation guidance. Activates for requests involving vulnerability scanning, Nessus assessment, patch compliance checking, or automated vulnerability detection.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-vulnerability-scanning-with-nessus\u002FSKILL.md",[364,365],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[316,367,287,368,243,369,218,370,335,317,221,371,372,373,296,374,271,250,339,321],"nessus","performing vulnerability scanning with nessus","vulnerability detection","infrastructure","patch-management","vulnerability-scanning","cvss","t1003",{"skillNo":376,"name":377,"nameZh":13,"description":378,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":379,"categories":380,"keywords":383,"publishedAt":228},"01M6AG4EENJZAA198T4ZYFASXV","performing-vlan-hopping-attack","Simulates VLAN hopping attacks using switch spoofing and 802.1Q double tagging techniques in authorized lab environments to test VLAN segmentation effectiveness and switch port security. Use during an authorized penetration test to validate trunk port hardening, confirm DTP is disabled on access ports, and demonstrate Layer 2 segmentation bypass risk to network teams.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-vlan-hopping-attack\u002FSKILL.md",[381,382],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[384,385,216,218,314,386,219,292,221,222,387,388,389,298,390,391,392],"vlan","performing vlan hopping attack","validate","hardening","switch-security","802.1q","segmentation","layer2-attack","vlan-hopping",{"skillNo":394,"name":395,"nameZh":13,"description":396,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":397,"categories":398,"keywords":404,"publishedAt":228},"01M6AG4B7MAXC592MBDVSPAAE8","performing-user-behavior-analytics","Performs User and Entity Behavior Analytics (UEBA) to detect anomalous user activities including impossible travel, unusual access patterns, privilege abuse, and insider threats using SIEM-based behavioral baselines and statistical analysis. Use when SOC teams need to identify compromised accounts or insider threats through deviation from established behavioral norms.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-user-behavior-analytics\u002FSKILL.md",[399,402,403],{"categoryNo":400,"categoryName":401,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000013","分析与可视化",{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":68,"categoryName":69,"taxonomyType":53,"taxonomyTypeDesc":54},[405,406,218,407,292,408,409,410,411,412,413,271,414,415,416,417,418],"analytics","performing user behavior analytics","siem","soc","splunk","detection","anomaly-detection","UEBA","insider-threat","t1566","baseline","analysis","statistical analysis","user-behavior",{"skillNo":420,"name":421,"nameZh":13,"description":422,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":423,"categories":424,"keywords":426,"publishedAt":228},"01M6AG482D2BEA49WRV5C1VGJW","performing-timeline-reconstruction-with-plaso","Builds comprehensive forensic super-timelines using Plaso (log2timeline and psort) to correlate events across file system metadata, event logs, browser history, and registry artifacts into a unified chronological view. Use during complex forensic investigations that need cross-source event correlation, or when standard log analysis is insufficient to establish the sequence of activities for reporting findings.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-timeline-reconstruction-with-plaso\u002FSKILL.md",[425],{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[427,428,429,218,430,431,432,433,434,435,436,437,438,439,440,441,442,250,443,416],"plaso","timeline","performing timeline reconstruction with plaso","registry","artifacts","browser","file","logs","reporting","forensics","timeline-analysis","digital-forensics","log2timeline","super-timeline","correlation","event-correlation","t1074",{"skillNo":445,"name":446,"nameZh":13,"description":447,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":448,"categories":449,"keywords":459,"publishedAt":228},"01M6AG43AKSG13NXT18JNVVAE0","performing-threat-modeling-with-owasp-threat-dragon","Uses OWASP Threat Dragon (web or desktop) to build data flow diagrams, identify threats with STRIDE, LINDDUN, CIA, DIE, or PLOT4ai methodologies via its auto-generation rule engine, and produce PDF threat model reports. Use during secure design review of an application architecture to build a formal threat model and document mitigations for GRC compliance.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-threat-modeling-with-owasp-threat-dragon\u002FSKILL.md",[450,453,456,457,458],{"categoryNo":451,"categoryName":452,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":454,"categoryName":455,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":61,"categoryName":62,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":68,"categoryName":69,"taxonomyType":53,"taxonomyTypeDesc":54},[460,248,461,462,463,464,465,466,218,467,468,219,469,470,471,270,472,250,473,474],"threat modeling","performing threat modeling with owasp threat dragon","PDF","design","review","design review","devsecops","architecture","secure","threat model","produce","flow","threat-modeling","t1195","grc",{"skillNo":476,"name":477,"nameZh":13,"description":478,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":479,"categories":480,"keywords":482,"publishedAt":228},"01M6AG4026A4MZ8XGQNFW0SDF5","performing-threat-landscape-assessment-for-sector","Conducts a sector-specific threat landscape assessment (financial, healthcare, energy, government, etc.) by profiling targeting threat actors, mapping attack vectors and MITRE ATT&CK TTPs with the attackcti\u002Fpandas Python stack, and analyzing exploited CVEs and incident trends from ISAC and vendor reports. Use when producing CTI for risk management or board-level reporting on an industry's threat exposure.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-threat-landscape-assessment-for-sector\u002FSKILL.md",[481],{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[335,483,484,218,337,485,433,435,486,487,488,489,490,491,298,414,416,492,493,494],"performing threat landscape assessment for sector","python","pandas","threat-intelligence","cti","analyzing","attackcti","threat-landscape","ATT&CK","strategic-intelligence","sector-analysis","industry-targeting",{"skillNo":496,"name":497,"nameZh":13,"description":498,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":499,"categories":500,"keywords":501,"publishedAt":228},"01M6AG3WMN5YBX0VGQYXHJ8RNJ","performing-threat-intelligence-sharing-with-misp","Uses PyMISP (the official MISP REST API library) to create events with structured IOCs (IPs, domains, hashes, URLs), enrich them with MITRE ATT&CK tags and galaxy clusters, manage sharing groups and distribution levels, search existing intelligence, and export in STIX 2.1 format. Use when creating, enriching, or sharing threat intelligence events on a MISP instance, or integrating IOC feeds with other platforms.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-threat-intelligence-sharing-with-misp\u002FSKILL.md",[],[502,503,504,505,218,506,507,508,509,486,510,511,512,513,514,515,491,516,517,518],"threat intelligence","MISP","sharing","performing threat intelligence sharing with misp","official","create","search","library","ioc","stix","TAXII","feeds","REST","ips","api","ioc-sharing","information-sharing",{"skillNo":520,"name":521,"nameZh":13,"description":522,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":523,"categories":524,"keywords":526,"publishedAt":228},"01M6AG3ST9RW6GK95FGNZ19NS2","performing-threat-hunting-with-yara-rules","Use YARA pattern-matching rules to hunt for malware, suspicious files, and indicators of compromise across filesystems and memory dumps. Covers rule authoring, yara-python scanning, and integration with threat intel feeds.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-threat-hunting-with-yara-rules\u002FSKILL.md",[525],{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[527,528,529,530,484,531,218,337,245,433,532,533,534,513,410,535,536,416,537,538],"threat hunting","yara","performing threat hunting with yara rules","suspicious","memory","integration","threat-hunting","malware","execution","indicators","pattern-matching","malware-detection",{"skillNo":540,"name":541,"nameZh":13,"description":542,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":543,"categories":544,"keywords":546,"publishedAt":228},"01M6AG3P6RMEE8PVM59B5KTDEH","performing-threat-hunting-with-elastic-siem","Performs proactive threat hunting in Elastic Security SIEM using KQL\u002FEQL queries, detection rules, and Timeline investigation to identify threats that evade automated detection. Use when SOC teams need to hunt for specific ATT&CK techniques, investigate anomalous behaviors, or validate detection coverage gaps using Elasticsearch and Kibana Security.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-threat-hunting-with-elastic-siem\u002FSKILL.md",[545],{"categoryNo":212,"categoryName":213,"taxonomyType":6,"taxonomyTypeDesc":7},[407,527,547,548,216,218,549,292,318,550,533,408,221,491,551,271,414,416,552,553],"elastic","performing threat hunting with elastic siem","kql","mitre-attack","elasticsearch","kibana","eql",{"skillNo":555,"name":556,"nameZh":13,"description":557,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":558,"categories":559,"keywords":561,"publishedAt":228},"01M6AG3JEC13CWPEDEV7HBDZG3","performing-threat-emulation-with-atomic-red-team","Executes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Loads test definitions from YAML atomics, runs attack simulations, and validates detection coverage. Use when testing SIEM detection rules, validating EDR coverage, or conducting purple team exercises.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-threat-emulation-with-atomic-red-team\u002FSKILL.md",[560],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},[355,562,243,484,218,407,563,564,565,550,486,566,567,491,568,535,416,569,570,571],"performing threat emulation with atomic red team","framework","operator","red-team","adversary-emulation","purple-team","edr","atomic-red-team","threat-emulation","atomic-operator",{"skillNo":573,"name":574,"nameZh":13,"description":575,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":576,"categories":577,"keywords":581,"publishedAt":228},"01M6AG3EHJAV1SHMDEY635MJA0","performing-thick-client-application-penetration-test","Conduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hijacking, memory manipulation, and insecure API communication in desktop applications using dnSpy, Procmon, and Burp Suite.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-thick-client-application-penetration-test\u002FSKILL.md",[578,579,580],{"categoryNo":236,"categoryName":237,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":309,"categoryName":310,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":52,"categoryName":55,"taxonomyType":53,"taxonomyTypeDesc":54},[314,582,243,531,218,583,584,585,374,271,339,416,321,516,586,587,588,589,590,591],"performing thick client application penetration test","storage","communication","binary-analysis","thick-client","desktop-application","dnSpy","Procmon","DLL-hijacking","API-interception",87,18]