[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:pro6":3,"skills:sce6":50,"skills:stats":95,"skills:creators9":100,"skills:all:stars:91:":195},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13274,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7773,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39460,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26530,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13568,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6291,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6030,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"skillCount":96,"professionCount":97,"scenarioCount":98,"creatorCount":99},196570,11,7,1905,{"records":101,"total":99,"current":11,"size":194},[102,114,123,133,143,153,163,172,182],{"accountNo":103,"login":104,"displayName":105,"avatarUrl":106,"accountType":107,"accountTypeDesc":108,"profileDescription":109,"skillCount":110,"repoCount":111,"professionCount":97,"scenarioCount":98,"totalStars":112,"updatedAt":113},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,828730,"2026-11-13 03:12:52",{"accountNo":115,"login":116,"displayName":116,"avatarUrl":117,"accountType":107,"accountTypeDesc":108,"profileDescription":118,"skillCount":119,"repoCount":120,"professionCount":98,"scenarioCount":98,"totalStars":121,"updatedAt":122},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":124,"login":125,"displayName":126,"avatarUrl":127,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":128,"repoCount":129,"professionCount":98,"scenarioCount":130,"totalStars":131,"updatedAt":132},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342692,"2026-11-13 03:15:50",{"accountNo":134,"login":135,"displayName":136,"avatarUrl":137,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":138,"repoCount":139,"professionCount":140,"scenarioCount":98,"totalStars":141,"updatedAt":142},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":144,"login":145,"displayName":146,"avatarUrl":147,"accountType":107,"accountTypeDesc":108,"profileDescription":148,"skillCount":149,"repoCount":150,"professionCount":97,"scenarioCount":98,"totalStars":151,"updatedAt":152},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242350,"2026-11-13 03:05:39",{"accountNo":154,"login":155,"displayName":156,"avatarUrl":157,"accountType":107,"accountTypeDesc":108,"profileDescription":158,"skillCount":159,"repoCount":160,"professionCount":97,"scenarioCount":98,"totalStars":161,"updatedAt":162},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",936,27,238434,"2026-11-13 03:17:57",{"accountNo":164,"login":165,"displayName":166,"avatarUrl":167,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":168,"repoCount":169,"professionCount":97,"scenarioCount":98,"totalStars":170,"updatedAt":171},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231455,"2026-11-12 03:40:35",{"accountNo":173,"login":174,"displayName":175,"avatarUrl":176,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":177,"repoCount":178,"professionCount":179,"scenarioCount":98,"totalStars":180,"updatedAt":181},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":183,"login":184,"displayName":185,"avatarUrl":186,"accountType":187,"accountTypeDesc":188,"profileDescription":189,"skillCount":190,"repoCount":191,"professionCount":130,"scenarioCount":98,"totalStars":192,"updatedAt":193},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174534,"2026-11-13 03:23:36",9,{"records":196,"total":96,"current":583,"size":584},[197,236,258,278,299,322,351,368,385,406,422,450,470,488,505,528,546,565],{"skillNo":198,"name":199,"nameZh":13,"description":200,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":209,"categories":210,"keywords":214,"publishedAt":235},"01M6AFXB0RTVGG0AZF1WFN81ZW","performing-memory-forensics-with-volatility3-plugins","Analyze memory dumps using Volatility3 plugins to detect injected code, rootkits, credential theft, and malware artifacts in Windows, Linux, and macOS memory images.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-memory-forensics-with-volatility3-plugins\u002FSKILL.md",[211],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000023","Skill与智能体开发",[215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234],"memory","plugins","forensics","volatility3","performing memory forensics with volatility3 plugins","macos","linux","cybersecurity","windows","code","malware","rootkit","memory-forensics","dfir","process-injection","t1003","execution","injection","analysis","rootkit-detection","2026-11-10 10:12:30",{"skillNo":237,"name":238,"nameZh":13,"description":239,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":240,"categories":241,"keywords":243,"publishedAt":235},"01M6AFX7RDZSFW2BCSEC9DC2Z5","performing-malware-triage-with-yara","Performs rapid malware triage and classification using YARA rules that match file patterns, strings, byte sequences, and structural characteristics against known malware families and suspicious indicators, covering rule writing, scanning, and integration into analysis pipelines. Use when classifying a batch of malware samples against known family signatures, writing detection rules for a newly analyzed malware family, or performing signature-based malware triage.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-malware-triage-with-yara\u002FSKILL.md",[242],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[244,225,245,246,247,248,222,249,250,251,252,253,254,255,233,256,257],"triage","yara","performing malware triage with yara","writing","suspicious","batch","file","integration","malware-analysis","detection","t1055","indicators","classification","pattern-matching",{"skillNo":259,"name":260,"nameZh":13,"description":261,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":262,"categories":263,"keywords":265,"publishedAt":235},"01M6AFX4MQFFSK4DQN9SZ3XJEE","performing-malware-persistence-investigation","Systematically investigate all persistence mechanisms on Windows and Linux systems to identify how malware survives reboots and maintains access.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-malware-persistence-investigation\u002FSKILL.md",[264],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[266,225,267,268,221,222,223,269,270,217,226,271,272,273,253,274,275,276,277,234],"persistence","investigation","performing malware persistence investigation","tasks","registry","autoruns","incident-response","digital-forensics","scheduled-tasks","t1074","t1547","malware-persistence",{"skillNo":279,"name":280,"nameZh":13,"description":281,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":282,"categories":283,"keywords":285,"publishedAt":235},"01M6AFX1J31NT45A55628AVX9D","performing-malware-ioc-extraction","Malware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise including file hashes, network indicators (C2 domains, IP addresses, URLs), regist","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-malware-ioc-extraction\u002FSKILL.md",[284],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[286,225,287,288,289,222,250,290,291,292,293,294,295,296,252,245,297,298,255,233],"extraction","ioc","performing malware ioc extraction","malicious","engineering","reverse-engineering","mitre-attack","threat-intelligence","cti","stix","c2","analyzing","network",{"skillNo":300,"name":301,"nameZh":13,"description":302,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":303,"categories":304,"keywords":310,"publishedAt":235},"01M6AFWYBV4S3X78B4R2QHVT0G","performing-malware-hash-enrichment-with-virustotal","Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal API v3 to retrieve multi-engine detection rates, sandbox behavioral analysis, YARA rule matches, related indicators, and community threat intelligence. Use during SOC triage, incident response, or threat intelligence workflows to validate whether a file hash is malicious and gather context for IOC enrichment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-malware-hash-enrichment-with-virustotal\u002FSKILL.md",[305,308,309],{"categoryNo":306,"categoryName":307,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[225,311,312,313,289,314,222,315,316,317,250,293,287,318,245,255,319,233,320,321],"VirusTotal","enrichment","performing malware hash enrichment with virustotal","sandbox","incident response","threat intelligence","workflows","soc","sha-256","api","hash-enrichment",{"skillNo":323,"name":324,"nameZh":13,"description":325,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":326,"categories":327,"keywords":332,"publishedAt":235},"01M6AFWT2912TB8DX4DCSXR3MH","performing-log-source-onboarding-in-siem","Perform structured log source onboarding into SIEM platforms (Splunk, Elastic, Sentinel, QRadar, or similar) by prioritizing sources with a tiered value framework, configuring collectors, building parsers, normalizing fields to a common schema (e.g. CIM), and validating data quality. Use when planning or executing the integration of new log sources — such as Active Directory, firewalls, EDR, VPN, DNS, or cloud audit logs — into a SIEM for security monitoring and detection.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-log-source-onboarding-in-siem\u002FSKILL.md",[328,329],{"categoryNo":23,"categoryName":24,"taxonomyType":6,"taxonomyTypeDesc":7},{"categoryNo":330,"categoryName":331,"taxonomyType":6,"taxonomyTypeDesc":7},"01JBSEEDCAT000000000000038","人力资源",[333,334,335,336,337,222,338,339,340,341,318,342,343,344,345,346,347,348,349,350],"siem","onboarding","performing log source onboarding in siem","directory","security","framework","audit","logs","monitoring","dns","splunk","data","elastic","sentinel","edr","t1078","t1566","log-management",{"skillNo":352,"name":353,"nameZh":13,"description":354,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":355,"categories":356,"keywords":358,"publishedAt":235},"01M6AFWPRS5RY3ZXV88KSJKZ2A","performing-log-analysis-for-forensic-investigation","Collect, parse, and correlate system, application, and security logs to reconstruct events and establish timelines during forensic investigations.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-log-analysis-for-forensic-investigation\u002FSKILL.md",[357],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[233,267,359,337,222,333,360,340,217,361,362,363,273,364,365,366,275,367],"performing log analysis for forensic investigation","collect","log-analysis","timeline-analysis","evidence-collection","correlation","event-correlation","timeline","collection",{"skillNo":369,"name":370,"nameZh":13,"description":371,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":372,"categories":373,"keywords":374,"publishedAt":235},"01M6AFWJJV9SARY3W4727TN0YE","performing-linux-log-forensics-investigation","Perform forensic investigation of Linux system logs including syslog, auth.log, systemd journal (via journalctl), kern.log, auditd, and application logs to reconstruct user sessions, identify unauthorized access and privilege escalation, trace lateral movement, and establish event timelines. Use when investigating a suspected compromise of a Linux system and needing to analyze SSH, sudo, cron, or kernel-level activity from plain-text or systemd journal logs.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-linux-log-forensics-investigation\u002FSKILL.md",[],[221,217,267,375,222,376,339,340,377,378,361,273,275,379,233,380,381,382,383,384],"performing linux log forensics investigation","auth","auditd","linux-forensics","syslog","auth-log","systemd-journal","journalctl","linux-logs","ssh-forensics",{"skillNo":386,"name":387,"nameZh":13,"description":388,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":389,"categories":390,"keywords":392,"publishedAt":235},"01M6AFWF3PB2FBP37CGZ4MY5HZ","performing-lateral-movement-with-wmiexec","Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-lateral-movement-with-wmiexec\u002FSKILL.md",[391],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[393,222,223,394,395,396,397,398,298,399,400,401,348,231,402,403,404,233,405],"performing lateral movement with wmiexec","remote execution","protocol","red-team","post-exploitation","red team","lateral-movement","Impacket","exploitation","t1059","wmi","networks","wmiexec",{"skillNo":407,"name":408,"nameZh":13,"description":409,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":410,"categories":411,"keywords":413,"publishedAt":235},"01M6AFWBXFPRR9FX2M15EEV32W","performing-lateral-movement-detection","Detects lateral movement techniques including Pass-the-Hash, PsExec, WMI execution, RDP pivoting, and SMB-based spreading by correlating Windows Security\u002FSysmon event logs, network flow data (NetFlow\u002FZeek), and endpoint telemetry in a SIEM, mapped to MITRE ATT&CK Lateral Movement (TA0008) techniques with sample SPL detection queries. Use when a SOC team needs to detect attackers pivoting between internal systems after initial compromise, trace an attacker's movement path during an incident investigation, or build detection engineering rules for TA0008; not for detecting initial access or external attacks.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-lateral-movement-detection\u002FSKILL.md",[412],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[253,414,222,333,340,292,318,298,415,344,416,417,399,418,419,420,421,348,349,233],"performing lateral movement detection","flow","netflow","sysmon","pass-the-hash","ta0008","smb","rdp",{"skillNo":423,"name":424,"nameZh":13,"description":425,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":426,"categories":427,"keywords":436,"publishedAt":235},"01M6AFW8ANX5MNVFXZH098HFCX","performing-kubernetes-penetration-testing","Evaluates Kubernetes cluster security by actively simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policy, and secrets, using kube-hunter, Kubescape, peirates, and manual kubectl exploitation to find paths to cluster compromise. Use for an authorized penetration test or hands-on validation that controls actually stop an attacker. Keywords: kube-hunter, Kubescape, peirates, kubelet 10250, anonymous auth, token theft, lateral movement, cluster takeover. Do not use for a configuration-only compliance audit - use performing-kubernetes-cis-benchmark-with-kube-bench.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-kubernetes-penetration-testing\u002FSKILL.md",[428,431,434,435],{"categoryNo":429,"categoryName":430,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":432,"categoryName":433,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":44,"categoryName":45,"taxonomyType":6,"taxonomyTypeDesc":7},[437,438,439,440,441,337,442,222,443,376,444,445,446,339,447,448,298,449,401,320],"testing","kubernetes","penetration testing","performing kubernetes penetration testing","containers","policy","test","rbac","pr","benchmark","server","container-security","kubectl",{"skillNo":451,"name":452,"nameZh":13,"description":453,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":454,"categories":455,"keywords":457,"publishedAt":235},"01M6AFW4PZ4NKSYSAGXTCC7QHE","performing-kubernetes-etcd-security-assessment","Assesses the security posture of the etcd cluster backing Kubernetes: encryption at rest, TLS peer and client transport, access control, backup encryption, and network isolation. Use when auditing or hardening a control plane, reviewing whether Secrets are encrypted at rest, or protecting etcd backups, since etcd stores Secrets, RBAC policy, and ConfigMaps in plaintext by default. Keywords: etcd, EncryptionConfiguration, encryption at rest, peer TLS, snapshot, backup, control plane. Do not use for broad cluster-wide CIS checks - use performing-kubernetes-cis-benchmark-with-kube-bench.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-kubernetes-etcd-security-assessment\u002FSKILL.md",[456],{"categoryNo":432,"categoryName":433,"taxonomyType":53,"taxonomyTypeDesc":54},[438,337,458,459,442,222,444,445,446,460,448,461,462,463,464,465,466,467,468,469],"assessment","performing kubernetes etcd security assessment","control plane","encryption","kube-bench","REST","tls","backup","etcd","security-assessment","secrets","control-plane",{"skillNo":471,"name":472,"nameZh":13,"description":473,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":474,"categories":475,"keywords":478,"publishedAt":235},"01M6AFW0T53THNSCN57SFRVGK1","performing-kubernetes-cis-benchmark-with-kube-bench","Turns kube-bench output into a finished CIS Kubernetes Benchmark audit: interpreting PASS\u002FFAIL\u002FWARN per control, judging which failures are genuine on a managed cluster, writing remediation, and packaging evidence for SOC 2 or PCI DSS. Use when conducting a scheduled compliance audit, triaging kube-bench results, deciding which controls are not applicable on EKS, GKE, or AKS, or producing hardening evidence for an auditor. Keywords: CIS Kubernetes Benchmark, control plane, remediation, compliance evidence, SOC 2, PCI DSS, managed cluster exception. Do not use for installing and running the tool - use benchmarking-kubernetes-with-kube-bench.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-kubernetes-cis-benchmark-with-kube-bench\u002FSKILL.md",[476,477],{"categoryNo":432,"categoryName":433,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":44,"categoryName":45,"taxonomyType":6,"taxonomyTypeDesc":7},[438,446,479,247,337,222,480,445,460,339,481,318,448,482,483,484,462,485,486,487],"performing kubernetes cis benchmark with kube bench","benchmarking","compliance","eks","gke","aks","cis-benchmark","remediation","aquasecurity",{"skillNo":489,"name":490,"nameZh":13,"description":491,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":492,"categories":493,"keywords":495,"publishedAt":235},"01M6AFVX1T9SGM9ZQWGX1E0DGZ","performing-kerberoasting-attack","Perform Kerberoasting, a post-exploitation technique that enumerates Active Directory service accounts with Service Principal Names (SPNs), requests their Kerberos TGS tickets, and cracks the NTLM-encrypted tickets offline to recover service account credentials. Use during authorized red team engagements or penetration tests to assess AD privilege escalation and credential access risk from weak service account passwords.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-kerberoasting-attack\u002FSKILL.md",[494],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[496,497,336,222,498,447,396,499,397,500,398,292,298,501,502,230,348,503,233,504],"kerberoasting","performing kerberoasting attack","offline","credential-access","active-directory","adversary-simulation","escalation","risk","credentials",{"skillNo":506,"name":507,"nameZh":13,"description":508,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":509,"categories":510,"keywords":513,"publishedAt":235},"01M6AFVSDV2ARAZJFRYS66MXW9","performing-jwt-none-algorithm-attack","Execute and test the JWT none algorithm attack, crafting tokens with the alg header set to none using PyJWT and an intercepting proxy (Burp Suite\u002Fmitmproxy) to bypass signature verification and forge arbitrary claims. Use during authorized penetration tests or security assessments of applications that use JWT for authentication or authorization, to validate that the server rejects unsigned tokens.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-jwt-none-algorithm-attack\u002FSKILL.md",[511,512],{"categoryNo":429,"categoryName":430,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":306,"categoryName":307,"taxonomyType":53,"taxonomyTypeDesc":54},[514,515,437,337,222,445,516,517,518,447,519,520,521,522,523,524,525,320,526,527],"jwt","performing jwt none algorithm attack","authentication","verification","proxy","api-security","forge","authentication-bypass","owasp","mitmproxy","SET","applications","none-algorithm","signature-bypass",{"skillNo":529,"name":530,"nameZh":13,"description":531,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":532,"categories":533,"keywords":537,"publishedAt":235},"01M6AFVNF49JQF9X2HD1X7D8A0","performing-ip-reputation-analysis-with-shodan","Analyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities, and hosting context for threat intelligence enrichment and incident triage.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-ip-reputation-analysis-with-shodan\u002FSKILL.md",[534,535,536],{"categoryNo":306,"categoryName":307,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[538,233,539,222,316,540,244,541,293,312,542,543,544,320,545],"Shodan","performing ip reputation analysis with shodan","vulnerabilities","services","reconnaissance","ip-reputation","vulnerability","internet-scanning",{"skillNo":547,"name":548,"nameZh":13,"description":549,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":550,"categories":551,"keywords":554,"publishedAt":235},"01M6AFVHDGA3MR8XFBXEWKG6GM","performing-iot-security-assessment","Performs comprehensive security assessments of IoT devices and their ecosystems by testing hardware interfaces, firmware, network communications, cloud APIs, and companion mobile applications. The tester uses firmware extraction and analysis, hardware debugging via UART and JTAG, network protocol analysis, and runtime exploitation to identify vulnerabilities across all layers of the IoT stack. Activates for requests involving IoT security testing, embedded device assessment, firmware security analysis, or smart device penetration testing.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-iot-security-assessment\u002FSKILL.md",[552,553],{"categoryNo":429,"categoryName":430,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[337,458,555,556,437,222,557,558,439,298,559,348,402,560,525,233,561,562,563,564],"iot","performing iot security assessment","security analysis","debugging","firmware","devices","firmware-analysis","embedded-systems","hardware-hacking","UART-JTAG",{"skillNo":566,"name":567,"nameZh":13,"description":568,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":569,"categories":570,"keywords":572,"publishedAt":235},"01M6AFVDFWSPXR10RRB7G95K2S","performing-ios-app-security-assessment","Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain extraction for credential analysis, and IPA static analysis for binary-level review. Use when conducting authorized iOS penetration tests, evaluating mobile app security posture against OWASP MASTG, or assessing iOS app data protection and transport security controls. Activates for requests involving iOS app pentesting, Frida-based iOS instrumentation, mobile app SSL pinning bypass, or IPA reverse engineering.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-ios-app-security-assessment\u002FSKILL.md",[571],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[337,458,573,574,575,576,577,222,445,344,522,578,579,230,348,402,233,580,581,582],"ios","performing ios app security assessment","review","application security","static analysis","OWASP-MASTG","pentesting","ssl-pinning","keychain","ipa-analysis",91,18]