[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:pro6":3,"skills:sce6":50,"skills:creators9":95,"skills:stats":193,"skills:all:stars:94:":195},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13272,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7773,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3939,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39456,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26528,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13567,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":96,"total":191,"current":11,"size":192},[97,111,120,130,140,150,160,169,179],{"accountNo":98,"login":99,"displayName":100,"avatarUrl":101,"accountType":102,"accountTypeDesc":103,"profileDescription":104,"skillCount":105,"repoCount":106,"professionCount":107,"scenarioCount":108,"totalStars":109,"updatedAt":110},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,11,7,828741,"2026-11-13 03:39:29",{"accountNo":112,"login":113,"displayName":113,"avatarUrl":114,"accountType":102,"accountTypeDesc":103,"profileDescription":115,"skillCount":116,"repoCount":117,"professionCount":108,"scenarioCount":108,"totalStars":118,"updatedAt":119},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":121,"login":122,"displayName":123,"avatarUrl":124,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":125,"repoCount":126,"professionCount":108,"scenarioCount":127,"totalStars":128,"updatedAt":129},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":131,"login":132,"displayName":133,"avatarUrl":134,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":135,"repoCount":136,"professionCount":137,"scenarioCount":108,"totalStars":138,"updatedAt":139},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":141,"login":142,"displayName":143,"avatarUrl":144,"accountType":102,"accountTypeDesc":103,"profileDescription":145,"skillCount":146,"repoCount":147,"professionCount":107,"scenarioCount":108,"totalStars":148,"updatedAt":149},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242366,"2026-11-13 03:11:16",{"accountNo":151,"login":152,"displayName":153,"avatarUrl":154,"accountType":102,"accountTypeDesc":103,"profileDescription":155,"skillCount":156,"repoCount":157,"professionCount":107,"scenarioCount":108,"totalStars":158,"updatedAt":159},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",937,28,238436,"2026-11-13 03:57:35",{"accountNo":161,"login":162,"displayName":163,"avatarUrl":164,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":165,"repoCount":166,"professionCount":107,"scenarioCount":108,"totalStars":167,"updatedAt":168},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231455,"2026-11-12 03:40:35",{"accountNo":170,"login":171,"displayName":172,"avatarUrl":173,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":174,"repoCount":175,"professionCount":176,"scenarioCount":108,"totalStars":177,"updatedAt":178},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":180,"login":181,"displayName":182,"avatarUrl":183,"accountType":184,"accountTypeDesc":185,"profileDescription":186,"skillCount":187,"repoCount":188,"professionCount":127,"scenarioCount":108,"totalStars":189,"updatedAt":190},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174613,"2026-11-13 04:05:07",1905,9,{"skillCount":194,"professionCount":107,"scenarioCount":108,"creatorCount":191},196564,{"records":196,"total":194,"current":588,"size":589},[197,237,264,288,309,335,361,379,398,415,433,450,467,484,503,531,547,570],{"skillNo":198,"name":199,"nameZh":13,"description":200,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":209,"categories":210,"keywords":215,"publishedAt":236},"01M6AFQBKV13T62JSSMXRH2YTH","performing-content-security-policy-bypass","Analyze Content-Security-Policy headers and bypass them to achieve cross-site scripting by exploiting unsafe-inline\u002Funsafe-eval, whitelisted JSONP endpoints, base-uri and form-action gaps, and nonce\u002Fhash weaknesses, then exfiltrate data even without script-src control. Use during web application security assessments or bug bounty hunting when XSS is found but blocked by CSP, or when auditing CSP header configuration for weaknesses.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-content-security-policy-bypass\u002FSKILL.md",[211,214],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":30,"categoryName":31,"taxonomyType":6,"taxonomyTypeDesc":7},[216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235],"security","policy","content","performing content security policy bypass","application security","cybersecurity","pr","data","web-application-security","t1059","injection","xss","t1505","application-security","csp-bypass","content-security-policy","script-injection","nonce-bypass","jsonp","policy-misconfiguration","2026-11-10 10:12:30",{"skillNo":238,"name":239,"nameZh":13,"description":240,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":241,"categories":242,"keywords":246,"publishedAt":236},"01M6AFQ8ES68DASR7DS7HF0VD3","performing-container-security-scanning-with-trivy","Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed secrets, and licences, generating CycloneDX or SPDX SBOMs. Use when integrating Trivy into CI\u002FCD, deploying the Trivy Kubernetes operator, scanning non-image targets, or triaging results at scale. Keywords: Trivy, trivy k8s, operator, SBOM, CycloneDX, SPDX, misconfig, secret scanning. Do not use for a single Docker image scan - use scanning-docker-images-with-trivy.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-container-security-scanning-with-trivy\u002FSKILL.md",[243],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000011","运维与部署",[216,247,248,249,250,251,252,221,253,222,254,255,256,257,258,259,260,261,262,263],"trivy","performing container security scanning with trivy","image","docker","kubernetes","devsecops","vulnerabilities","container images","git","kubernetes operator","operator","ci","container-security","SBOM","vulnerability-scanning","t1195","misconfiguration",{"skillNo":265,"name":266,"nameZh":13,"description":267,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":268,"categories":269,"keywords":275,"publishedAt":236},"01M6AFQ4JJEDMVD1NZYSSCWNBJ","performing-container-image-hardening","Harden container images by minimizing attack surface, stripping unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure, production-ready images. Use when building production container images, when compliance requires CIS Docker Benchmark adherence, or when shrinking image size to reduce vulnerability exposure from unused packages.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-container-image-hardening\u002FSKILL.md",[270,271,274],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":272,"categoryName":273,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[249,276,277,250,252,221,278,222,279,254,280,281,282,283,284,225,262,285,286,287],"hardening","performing container image hardening","secure","packages","benchmark","produce","compliance","cis-benchmark","Production","cicd","secure-sdlc","container-hardening",{"skillNo":289,"name":290,"nameZh":13,"description":291,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":292,"categories":293,"keywords":294,"publishedAt":236},"01M6AFQ1CFDB0H1BEP3SGPX8MQ","performing-container-escape-detection","Audits container and pod configuration for escape-enabling misconfiguration using the Kubernetes Python client - privileged flags, dangerous capability grants, host path mounts, shared namespaces, and CVE-2022-0492 style cgroup abuse. Use when sweeping a cluster for workloads that could break out, producing a posture report, or checking configuration before enforcement is switched on. Keywords: privileged, hostPath, hostPID, capabilities, CVE-2022-0492, cgroup, kubernetes python client, posture audit. Do not use for runtime syscall-based detection - use detecting-container-escape-attempts.\n'","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-container-escape-detection\u002FSKILL.md",[],[295,296,297,251,298,216,221,222,299,300,301,302,303,259,304,305,263,306,307,308],"detection","performing container escape detection","python","linux","report","capabilities","audit","cve","threat-detection","container-escape","privileged-container","analysis","namespace-analysis","linux-capabilities",{"skillNo":310,"name":311,"nameZh":13,"description":312,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":313,"categories":314,"keywords":319,"publishedAt":236},"01M6AFPWZ0DCMXNANNKVCRJ6MG","performing-cloud-storage-forensic-acquisition","Perform forensic acquisition of cloud storage services including Google Drive, OneDrive, Dropbox, and Box by pulling API-based remote data such as revision history and audit logs, and collecting local sync-client artifacts including KAPE targets and OneDrive databases from endpoints. Use during incident response or e-discovery when evidence resides in cloud-synced storage and both cloud-side and endpoint-side artifacts must be preserved.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-storage-forensic-acquisition\u002FSKILL.md",[315,318],{"categoryNo":316,"categoryName":317,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[320,321,322,142,221,323,324,325,326,301,327,328,223,329,330,225,331,332,333,334],"storage","cloud","performing cloud storage forensic acquisition","incident response","sync","artifacts","google drive","logs","services","digital-forensics","endpoint","t1074","cloud-forensics","google-drive","onedrive",{"skillNo":336,"name":337,"nameZh":13,"description":338,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":339,"categories":340,"keywords":345,"publishedAt":236},"01M6AFPSPRNC597WAB0S2CVRTG","performing-cloud-penetration-testing-with-pacu","Run authorized AWS penetration tests with Pacu, the open-source AWS exploitation framework, to enumerate IAM configuration, scan for privilege escalation paths, and test data access and lateral movement using compromised credentials. Use when conducting authorized red-team assessments of AWS environments, validating IAM policies and SCPs, or determining the blast radius of compromised AWS credentials.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-penetration-testing-with-pacu\u002FSKILL.md",[341,344],{"categoryNo":342,"categoryName":343,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[346,321,347,348,349,216,221,350,222,351,352,353,354,355,223,356,357,358,359,360],"testing","penetration testing","pacu","performing cloud penetration testing with pacu","test","run","blast radius","framework","red-team","cloud-security","iam","escalation","t1078","radius","credentials",{"skillNo":362,"name":363,"nameZh":13,"description":364,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":365,"categories":366,"keywords":367,"publishedAt":236},"01M6AFPNXPF8RVQTHDHCKEV7RF","performing-cloud-native-threat-hunting-with-aws-detective","Investigate AWS security incidents using Amazon Detective's behavior graphs, built from CloudTrail, VPC Flow Logs, GuardDuty, and EKS audit logs, to trace entity timelines and profile IAM users, roles, EC2 instances, and IP addresses for lateral movement. Use when triaging GuardDuty findings, investigating a suspected AWS compromise, or reconstructing an attacker's activity timeline across AWS accounts.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-native-threat-hunting-with-aws-detective\u002FSKILL.md",[],[368,369,321,370,371,216,221,222,372,301,327,355,373,374,375,356,376,377,358,378],"threat hunting","cloud native","aws","performing cloud native threat hunting with aws detective","graph","threat-hunting","incident-investigation","flow","eks","guardduty","vpc",{"skillNo":380,"name":381,"nameZh":13,"description":382,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":383,"categories":384,"keywords":386,"publishedAt":236},"01M6AFPJFQMZA2VV83F43SEJ53","performing-cloud-native-forensics-with-falco","Uses Falco YAML rules for runtime threat detection in containers and Kubernetes, monitoring syscalls for shell spawns, file tampering, network anomalies, and privilege escalation. Manages Falco rules via the Falco gRPC API and parses Falco alert output. Use when building container runtime security or investigating k8s cluster compromises.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-native-forensics-with-falco\u002FSKILL.md",[385],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[369,321,387,388,389,390,251,221,222,391,392,393,394,355,303,395,357,396,358,397],"forensics","falco","performing cloud native forensics with falco","containers","grpc","file","yaml","monitoring","container-forensics","syscall-monitoring","runtime-threat-detection",{"skillNo":399,"name":400,"nameZh":13,"description":401,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":402,"categories":403,"keywords":406,"publishedAt":236},"01M6AFPF0RETMB8CDRV1EV19VY","performing-cloud-log-forensics-with-athena","Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation. Covers CREATE TABLE DDL with partition projection, forensic SQL queries for detecting unauthorized access, data exfiltration, lateral movement, and privilege escalation. Use when investigating AWS security incidents or building cloud-native forensic workflows at scale.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-log-forensics-with-athena\u002FSKILL.md",[404,405],{"categoryNo":316,"categoryName":317,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":23,"categoryName":24,"taxonomyType":6,"taxonomyTypeDesc":7},[321,387,407,216,221,408,409,222,410,327,355,411,375,223,357,358,378,412,413,414],"performing cloud log forensics with athena","workflows","sql","create","exfiltration","athena","vpc-flow-logs","alb",{"skillNo":416,"name":417,"nameZh":13,"description":418,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":419,"categories":420,"keywords":421,"publishedAt":236},"01M6AFPB7X1YDM4K38P8A238JD","performing-cloud-incident-containment-procedures","Execute cloud-native incident containment across AWS, Azure, and GCP using platform CLIs to revoke or disable compromised IAM credentials, isolate resources with security groups and network ACLs, and preserve forensic evidence via snapshots. Use when responding to a cloud security incident that requires stopping lateral movement while keeping evidence intact for later investigation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-incident-containment-procedures\u002FSKILL.md",[],[321,422,423,216,217,221,424,425,426,355,427,428,356,429,430,358,431,360,332,432],"containment","performing cloud incident containment procedures","azure","authentication","cloud security","network","gcp","network-isolation","credential-revocation","t1490","incident-containment",{"skillNo":434,"name":435,"nameZh":13,"description":436,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":437,"categories":438,"keywords":441,"publishedAt":236},"01M6AFP85VYG402GB75SHZX82B","performing-cloud-forensics-with-aws-cloudtrail","Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents or AWS Athena SQL over S3-delivered logs, filtering on suspicious user agents, source IPs, and event names to reconstruct an attacker timeline. Use when tracing unauthorized API calls, S3 data exfiltration, IAM privilege escalation, or credential exposure, and building a forensic report of findings and remediation steps.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-forensics-with-aws-cloudtrail\u002FSKILL.md",[439,440],{"categoryNo":316,"categoryName":317,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[321,387,442,370,443,444,216,221,409,445,327,355,411,223,356,446,447,448,449,358],"cloudtrail","performing cloud forensics with aws cloudtrail","suspicious","tracing","remediation","ips","boto3","t1003",{"skillNo":451,"name":452,"nameZh":13,"description":453,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":454,"categories":455,"keywords":459,"publishedAt":236},"01M6AFP4XX39M2EA5ACEDSTNNZ","performing-cloud-forensics-investigation","Collect and analyze cloud forensic evidence using AWS CLI, Azure CLI, or gcloud to snapshot volumes, capture instance metadata and security group configurations, and preserve cloud-native logs (CloudTrail, Activity Log, Audit Log). Use when investigating a suspected breach in AWS, Azure, or GCP, tracing unauthorized access through API logs, or analyzing a compromised VM, container, or serverless function.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-forensics-investigation\u002FSKILL.md",[456,457,458],{"categoryNo":316,"categoryName":317,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[321,387,460,461,462,216,221,424,463,301,445,464,327,465,466,329,428,358,331,306],"investigation","performing cloud forensics investigation","cli","vm","collect","log-analysis","analyzing",{"skillNo":468,"name":469,"nameZh":13,"description":470,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":471,"categories":472,"keywords":475,"publishedAt":236},"01M6AFP0XD22DM8FZ63XWW42Y2","performing-cloud-asset-inventory-with-cartography","Run Cartography to sync AWS, GCP, or Azure resources into a Neo4j graph database, mapping relationships such as IAM permission chains, network paths, and cross-account trust. Use when building a cloud asset inventory, querying the graph to identify attack paths, or generating security reports across multi-cloud infrastructure.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-asset-inventory-with-cartography\u002FSKILL.md",[473,474],{"categoryNo":316,"categoryName":317,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[321,476,477,216,221,324,222,478,351,479,372,480,355,427,428,356,358,481,482,483],"inventory","performing cloud asset inventory with cartography","infrastructure","database","graph database","cncf","attack-path","cartography",{"skillNo":485,"name":486,"nameZh":13,"description":487,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":488,"categories":489,"keywords":492,"publishedAt":236},"01M6AFNXCWN5ZJX1WEYCXKW736","performing-clickjacking-attack-test","Testing web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-clickjacking-attack-test\u002FSKILL.md",[490,491],{"categoryNo":342,"categoryName":343,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[350,493,346,216,221,253,494,222,495,496,497,224,225,498,228,499,229,500,501,502],"performing clickjacking attack test","web","ui","penetration-testing","owasp","web-security","applications","clickjacking","ui-redressing","x-frame-options",{"skillNo":504,"name":505,"nameZh":13,"description":506,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":507,"categories":508,"keywords":514,"publishedAt":236},"01M6AFNSPPSFGPJFD8ZNRSKV3Y","performing-brand-monitoring-for-impersonation","Monitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-brand-monitoring-for-impersonation\u002FSKILL.md",[509,512,513],{"categoryNo":510,"categoryName":511,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":16,"categoryName":17,"taxonomyType":6,"taxonomyTypeDesc":7},[394,515,516,221,517,478,518,519,410,520,521,522,523,524,525,526,527,528,529,530],"impersonation","performing brand monitoring for impersonation","official","monitor","development","search","website","email","threat-intelligence","phishing","domain-monitoring","reconnaissance","initial-access","t1566","brand-monitoring","social-media",{"skillNo":532,"name":533,"nameZh":13,"description":534,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":535,"categories":536,"keywords":537,"publishedAt":236},"01M6AFNPFX0PYFJGA6SMMGB9MK","performing-bluetooth-security-assessment","Assess Bluetooth Low Energy (BLE) device security using Python's bleak asyncio library to discover nearby devices, enumerate GATT services and characteristics, and flag unencrypted or unauthenticated read\u002Fwrite access to sensitive data. Use when auditing IoT, healthcare, fitness, or smart-home BLE devices for weak pairing configurations or known vulnerable device fingerprints.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-bluetooth-security-assessment\u002FSKILL.md",[],[216,538,539,540,297,221,222,541,542,328,223,543,544,545,546],"assessment","bluetooth","performing bluetooth security assessment","library","iot","ble","gatt","wireless-security","devices",{"skillNo":548,"name":549,"nameZh":13,"description":550,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":551,"categories":552,"keywords":558,"publishedAt":236},"01M6AFNJJ2SQ2Y99J4MNFGFBX7","performing-blind-ssrf-exploitation","Detect and exploit blind Server-Side Request Forgery (SSRF) using out-of-band techniques such as Burp Collaborator DNS interactions and timing analysis, to reach internal services and cloud metadata endpoints even when server responses are not reflected. Use when testing URL\u002Fwebhook parameters, PDF generators, image processors, or import\u002Fpreview features where SSRF output cannot be observed directly.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-blind-ssrf-exploitation\u002FSKILL.md",[553,556,557],{"categoryNo":554,"categoryName":555,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":342,"categoryName":343,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[559,560,561,562,346,249,216,221,563,564,427,358,224,228,306,565,566,567,568,569],"ssrf","exploitation","performing blind ssrf exploitation","PDF","server","dns","blind-ssrf","out-of-band","burp-collaborator","cloud-metadata","internal-network",{"skillNo":571,"name":572,"nameZh":13,"description":573,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":574,"categories":575,"keywords":577,"publishedAt":236},"01M6AFNEVK0WF1XTX70K0VQ998","performing-binary-exploitation-analysis","Analyze ELF binaries for memory-corruption vulnerabilities and build proof-of-concept exploits using pwntools, checksec, and ROPgadget for buffer overflows and ROP chains. Use when a penetration test or CTF challenge requires evaluating compiler mitigations (NX, ASLR, stack canaries, PIE, RELRO) or developing a working exploit to demonstrate impact.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-binary-exploitation-analysis\u002FSKILL.md",[576],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},[560,306,578,216,579,221,253,350,580,581,582,358,225,583,584,585,586,587],"performing binary exploitation analysis","memory","compiler","ELF","offensive-security","ASLR","binary-exploitation","pwntools","rop-chains","buffer-overflow",94,18]