[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:pro6":3,"skills:sce6":50,"skills:creators9":95,"skills:stats":193,"skills:all:stars:95:":196},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13272,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7773,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3939,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39456,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26528,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13567,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":96,"total":191,"current":11,"size":192},[97,111,120,130,140,150,160,169,179],{"accountNo":98,"login":99,"displayName":100,"avatarUrl":101,"accountType":102,"accountTypeDesc":103,"profileDescription":104,"skillCount":105,"repoCount":106,"professionCount":107,"scenarioCount":108,"totalStars":109,"updatedAt":110},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,11,7,828741,"2026-11-13 03:39:29",{"accountNo":112,"login":113,"displayName":113,"avatarUrl":114,"accountType":102,"accountTypeDesc":103,"profileDescription":115,"skillCount":116,"repoCount":117,"professionCount":108,"scenarioCount":108,"totalStars":118,"updatedAt":119},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":121,"login":122,"displayName":123,"avatarUrl":124,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":125,"repoCount":126,"professionCount":108,"scenarioCount":127,"totalStars":128,"updatedAt":129},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":131,"login":132,"displayName":133,"avatarUrl":134,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":135,"repoCount":136,"professionCount":137,"scenarioCount":108,"totalStars":138,"updatedAt":139},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":141,"login":142,"displayName":143,"avatarUrl":144,"accountType":102,"accountTypeDesc":103,"profileDescription":145,"skillCount":146,"repoCount":147,"professionCount":107,"scenarioCount":108,"totalStars":148,"updatedAt":149},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242366,"2026-11-13 03:11:16",{"accountNo":151,"login":152,"displayName":153,"avatarUrl":154,"accountType":102,"accountTypeDesc":103,"profileDescription":155,"skillCount":156,"repoCount":157,"professionCount":107,"scenarioCount":108,"totalStars":158,"updatedAt":159},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",937,28,238436,"2026-11-13 03:57:35",{"accountNo":161,"login":162,"displayName":163,"avatarUrl":164,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":165,"repoCount":166,"professionCount":107,"scenarioCount":108,"totalStars":167,"updatedAt":168},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231455,"2026-11-12 03:40:35",{"accountNo":170,"login":171,"displayName":172,"avatarUrl":173,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":174,"repoCount":175,"professionCount":176,"scenarioCount":108,"totalStars":177,"updatedAt":178},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":180,"login":181,"displayName":182,"avatarUrl":183,"accountType":184,"accountTypeDesc":185,"profileDescription":186,"skillCount":187,"repoCount":188,"professionCount":127,"scenarioCount":108,"totalStars":189,"updatedAt":190},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174613,"2026-11-13 04:05:07",1905,9,{"skillCount":194,"professionCount":107,"scenarioCount":108,"creatorCount":195},196598,1908,{"records":197,"total":194,"current":592,"size":593},[198,239,262,283,307,330,346,367,388,415,434,451,470,493,513,537,555,576],{"skillNo":199,"name":200,"nameZh":13,"description":201,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":210,"categories":211,"keywords":218,"publishedAt":238},"01M6AFNBDSY5M9XYSTM4RK3HMM","performing-bandwidth-throttling-attack-simulation","Simulate bandwidth throttling and network degradation attacks using tc, iperf3, and Scapy in authorized lab environments to test QoS controls, application resilience, and monitoring detection of traffic manipulation. Use when validating how VoIP, video, or other real-time applications and network monitoring tools respond to degraded bandwidth or slowloris-style throttling attacks.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-bandwidth-throttling-attack-simulation\u002FSKILL.md",[212,215],{"categoryNo":213,"categoryName":214,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000023","Skill与智能体开发",[219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237],"throttling","performing bandwidth throttling attack simulation","security","cybersecurity","test","resilience","pr","monitoring","network","scapy","network-security","detection","Tools","real-time","applications","bandwidth-throttling","qos","traffic-shaping","network-resilience","2026-11-10 10:12:30",{"skillNo":240,"name":241,"nameZh":13,"description":242,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":243,"categories":244,"keywords":246,"publishedAt":238},"01M6AFN81JX6SF5GN6W21VB3CW","performing-aws-privilege-escalation-assessment","Performing authorized privilege escalation assessments in AWS environments to identify IAM misconfigurations that allow users or roles to elevate their permissions using Pacu, CloudFox, Principal Mapper, and manual IAM policy analysis techniques.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-aws-privilege-escalation-assessment\u002FSKILL.md",[245],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[247,248,249,250,221,251,222,225,252,253,254,255,256,257,258,259,260,261],"assessment","aws","escalation","performing aws privilege escalation assessment","policy","permissions","cloud","privilege-escalation","cloud-security","iam","offensive-security","t1078","cloudfox","pacu","analysis",{"skillNo":263,"name":264,"nameZh":13,"description":265,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":266,"categories":267,"keywords":269,"publishedAt":238},"01M6AFN3WRF4570P52FB68X4FV","performing-aws-account-enumeration-with-scout-suite","Run the agentless, open-source ScoutSuite tool (via pip install and the `scout` CLI) against an AWS account to enumerate resources across services, identify misconfigurations, and generate an interactive HTML security report. Use when assessing an AWS account's overall security posture with read-only IAM credentials, such as during a cloud security audit or compliance review.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-aws-account-enumeration-with-scout-suite\u002FSKILL.md",[268],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[248,270,271,272,273,221,222,225,274,275,276,277,255,256,258,278,279,280,281,282],"enumeration","performing aws account enumeration with scout suite","review","cli","generate","run","audit","cloud security","cspm","scoutsuite","credentials","security-audit","nccgroup",{"skillNo":284,"name":285,"nameZh":13,"description":286,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":287,"categories":288,"keywords":290,"publishedAt":238},"01M6AFN034NJZVXBRBTMVRPHRR","performing-automated-malware-analysis-with-cape","Deploy and operate the CAPEv2 malware sandbox (a Cuckoo derivative) to run samples in a monitored Windows guest VM, capturing behavioral signatures, dropped files, PCAP network traffic, and family-specific configuration extraction (e.g. Emotet, TrickBot, Cobalt Strike) via cape-parsers. Use when a suspicious file or payload needs automated dynamic analysis, anti-evasion debugger tricks, or config\u002Fpayload extraction.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-automated-malware-analysis-with-cape\u002FSKILL.md",[289],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[291,292,261,293,294,295,222,296,297,275,298,299,300,301,302,227,303,304,305,306],"malware analysis","malware","performing automated malware analysis with cape","suspicious","sandbox","config","windows","vm","file","malware-analysis","Cuckoo","behavioral-analysis","debugger","cape","automated-analysis","payload-extraction",{"skillNo":308,"name":309,"nameZh":13,"description":310,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":311,"categories":312,"keywords":314,"publishedAt":238},"01M6AFMWFXH1SAPZPCMYWNBSBE","performing-authenticated-vulnerability-scan","Plan and run authenticated (credentialed) vulnerability scans with scanners such as Nessus, Qualys, OpenVAS, or Rapid7 InsightVM, using SSH, SMB, WinRM, or SNMPv3 credentials to inspect installed software, patches, and configurations on Linux, Windows, and network devices. Use when a scan must catch vulnerabilities unauthenticated scanning misses, or when choosing and managing credential types for a credentialed scan.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-vulnerability-scan\u002FSKILL.md",[313],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[315,316,222,297,275,317,227,318,319,320,321,322,323,324,325,326,327,328,329,280],"performing authenticated vulnerability scan","linux","cve","vulnerability-management","nessus","qualys","openvas","smb","t1003","risk","devices","rapid7","insightvm","authenticated-scanning","winrm",{"skillNo":331,"name":332,"nameZh":13,"description":333,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":334,"categories":335,"keywords":336,"publishedAt":238},"01M6AFMRN95NTDY6EPN2509GAP","performing-authenticated-scan-with-openvas","Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS\u002FGreenbone Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local vulnerabilities, missing patches, and misconfigurations on target hosts. Use when a host-level scan needs to log into systems for deep inspection, since authenticated scans typically surface 10-50x more findings than unauthenticated scans.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002FSKILL.md",[],[321,337,221,222,338,339,227,229,318,340,322,323,341,342,343,344,345],"performing authenticated scan with openvas","vulnerabilities","vulnerability management","vulnerability-scanning","greenbone","ssh","gvm","authenticated-scan","credentialed-scan",{"skillNo":347,"name":348,"nameZh":13,"description":349,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":350,"categories":351,"keywords":353,"publishedAt":238},"01M6AFMMNDWW4Q7G4R698EMN53","performing-asset-criticality-scoring-for-vulns","Build a multi-factor asset criticality scoring model—incorporating data sensitivity, business function dependency, regulatory scope, network exposure, and recoverability—to produce a 1-5 criticality tier that weights vulnerability prioritization and remediation SLAs. Use when prioritizing vulnerability remediation by business impact or aligning CMDB asset data with risk-based patching timelines.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-asset-criticality-scoring-for-vulns\u002FSKILL.md",[352],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[354,222,355,227,356,318,357,358,359,324,360,361,362,363,364,365,366],"performing asset criticality scoring for vulns","produce","data","risk-management","remediation","multi-factor","vulnerability-prioritization","risk-based","asset-criticality","cmdb","business-impact","crown-jewels","asset-classification",{"skillNo":368,"name":369,"nameZh":13,"description":370,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":371,"categories":372,"keywords":375,"publishedAt":238},"01M6AFMHB81CDCA1GH4HE29HZF","performing-arp-spoofing-attack-simulation","Simulates ARP spoofing\u002Fcache-poisoning attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risk and validate Dynamic ARP Inspection, port security, and network monitoring detections. Use when testing whether switches, IDS\u002FIPS, or a SIEM detect ARP spoofing under written authorization; do not use on production networks without explicit approval.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-arp-spoofing-attack-simulation\u002FSKILL.md",[373,374],{"categoryNo":213,"categoryName":214,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[376,377,221,222,378,379,225,380,226,227,228,229,381,382,383,384,385,324,386,387],"performing arp spoofing attack simulation","testing","siem","validate","cache","mitm","ettercap","ids","ips","man-in-the-middle","networks","layer2-attack",{"skillNo":389,"name":390,"nameZh":13,"description":391,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":392,"categories":393,"keywords":400,"publishedAt":238},"01M6AFMDQYNS4D9EV7SHHZRW56","performing-api-security-testing-with-postman","Uses Postman to build structured API security test collections covering the OWASP API Security Top 10—authentication bypass, authorization flaws, injection, and data exposure—with multi-role environments, automated test scripts, and OWASP ZAP\u002FNewman integration for CI\u002FCD. Use when building repeatable Postman-based API security regression tests or automating OWASP API Top 10 coverage in a pipeline.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-api-security-testing-with-postman\u002FSKILL.md",[394,395,398,399],{"categoryNo":213,"categoryName":214,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":396,"categoryName":397,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[377,221,401,222,223,225,402,403,404,405,406,356,407,408,409,410,411,412,413,414],"performing api security testing with postman","authentication","validation","integration","ci","api-security","pipeline","owasp","authorization","t1059","injection","security-validation","automated-testing","postman",{"skillNo":416,"name":417,"nameZh":13,"description":418,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":419,"categories":420,"keywords":425,"publishedAt":238},"01M6AFMA56WJ99GD1RQGXQC75K","performing-api-rate-limiting-bypass","Tests API rate limiting for bypass vulnerabilities using Python (requests\u002Faiohttp) and Burp Suite Turbo Intruder to manipulate headers (e.g. X-Forwarded-For spoofing), IPs, HTTP methods, API versions, and encodings, mapping findings to OWASP API4:2023 Unrestricted Resource Consumption. Use when assessing, under written authorization, whether rate limits can be bypassed to enable brute force or resource-exhaustion attacks.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-api-rate-limiting-bypass\u002FSKILL.md",[421,422,423,424],{"categoryNo":213,"categoryName":214,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":396,"categoryName":397,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[426,427,221,222,338,428,225,406,408,409,384,429,430,431,410,432,219,433],"performing api rate limiting bypass","python","http","brute-force","rate-limiting","t1055","prevention","dos-prevention",{"skillNo":435,"name":436,"nameZh":13,"description":437,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":438,"categories":439,"keywords":443,"publishedAt":238},"01M6AFM6VCTF2K5A75HYMJEB4V","performing-api-inventory-and-discovery","Performs API inventory and discovery to identify all API endpoints in an organization's environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS enumeration, JavaScript analysis, and cloud resource inventory to build a comprehensive API catalog. Maps to OWASP API9:2023 Improper Inventory Management. Activates for requests involving API discovery, shadow API detection, API inventory audit, or attack surface mapping.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-api-inventory-and-discovery\u002FSKILL.md",[440,441,442],{"categoryNo":396,"categoryName":397,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[444,221,222,445,225,276,253,406,446,408,447,230,270,258,448,410,261,449,450],"performing api inventory and discovery","javascript","dns","attack-surface","api-discovery","shadow-api","inventory",{"skillNo":452,"name":453,"nameZh":13,"description":454,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":455,"categories":456,"keywords":461,"publishedAt":238},"01M6AFM34KVMSB46VSAJRVM67M","performing-api-fuzzing-with-restler","Uses Microsoft RESTler to perform stateful REST API fuzzing: compiles an OpenAPI\u002FSwagger spec into a RESTler grammar, configures authentication, and runs test\u002Ffuzz-lean\u002Ffuzz modes that generate request sequences exercising producer-consumer dependencies, then flags 500 errors, auth bypasses, resource leaks, and injection bugs. Use when fuzzing REST APIs for stateful bugs or running RESTler-based automated API security testing.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-api-fuzzing-with-restler\u002FSKILL.md",[457,458,459,460],{"categoryNo":213,"categoryName":214,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":396,"categoryName":397,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[462,463,377,464,221,222,223,99,465,225,274,402,406,466,410,411,467,468,413,469],"fuzzing","performing api fuzzing with restler","spec","auth","REST","openapi","restler","stateful-testing",{"skillNo":471,"name":472,"nameZh":13,"description":473,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":474,"categories":475,"keywords":482,"publishedAt":238},"01M6AFKZ2EMPSK1Z6FJQTN6Z61","performing-android-app-static-analysis-with-mobsf","Performs automated static analysis of Android applications using Mobile Security Framework (MobSF) to identify hardcoded secrets, insecure permissions, vulnerable components, weak cryptography, and code-level security flaws without executing the application. Use when assessing Android APK\u002FAAB files for security vulnerabilities before deployment, during penetration testing, or as part of CI\u002FCD security gates. Activates for requests involving Android static analysis, MobSF scanning, APK security assessment, or mobile application code review.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-android-app-static-analysis-with-mobsf\u002FSKILL.md",[476,477,480,481],{"categoryNo":213,"categoryName":214,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":478,"categoryName":479,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":5,"categoryName":8,"taxonomyType":6,"taxonomyTypeDesc":7},[483,484,261,485,486,377,272,221,222,487,247,488,252,405,489,490,408,491,258,492],"android","static analysis","performing android app static analysis with mobsf","code review","components","code","APK","static-analysis","cryptography","mobsf",{"skillNo":494,"name":495,"nameZh":13,"description":496,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":497,"categories":498,"keywords":500,"publishedAt":238},"01M6AFKVCHTSS373JP4XPP47HV","performing-alert-triage-with-elastic-siem","Perform systematic alert triage in Elastic Security SIEM—classifying, prioritizing, and investigating alerts using Kibana, ES|QL queries, and ECS-normalized data—to drive SOC analyst workflows. Use when triaging incoming Elastic Security detections, prioritizing an analyst's alert queue, or investigating alerts during SOC operations.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-alert-triage-with-elastic-siem\u002FSKILL.md",[499],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[378,501,502,503,504,221,222,505,402,506,507,356,230,258,508,261,509,510,511,512],"triage","alert triage","elastic","performing alert triage with elastic siem","workflows","protocol","soc","t1566","alert-triage","elastic-security","esql","kibana",{"skillNo":514,"name":515,"nameZh":13,"description":516,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":517,"categories":518,"keywords":520,"publishedAt":238},"01M6AFKQG3VF6NAQR5RR3Z5271","performing-ai-driven-osint-correlation","Use AI\u002FLLM-based reasoning with Sherlock, theHarvester, and SpiderFoot to correlate OSINT findings—usernames, emails, social profiles, domain records, breach databases, and dark-web mentions—into unified, confidence-scored intelligence profiles with link analysis. Use when raw OSINT data from multiple sources needs merging into one target profile or resolving identity linkage across platforms.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-ai-driven-osint-correlation\u002FSKILL.md",[519],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[521,522,523,222,524,525,403,526,527,356,528,529,530,261,531,532,533,534,535,536],"osint","correlation","performing ai driven osint correlation","web","reasoning","content","threat-intelligence","maltego","spiderfoot","reconnaissance","dark-web","ai-correlation","link-analysis","target-profiling","sherlock","theharvester",{"skillNo":538,"name":539,"nameZh":13,"description":540,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":541,"categories":542,"keywords":544,"publishedAt":238},"01M6AFKKA7P3DA9369S3SS5R9Z","performing-agentless-vulnerability-scanning","Configure and execute agentless vulnerability scanning using network protocols, cloud snapshot analysis, and API-based discovery to assess systems without installing endpoint agents.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-agentless-vulnerability-scanning\u002FSKILL.md",[543],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[545,546,221,222,247,547,253,255,227,318,548,258,549,261,550,551,342,552,553,554],"vulnerability scanning","performing agentless vulnerability scanning","protocols","endpoint","wmi","agentless-scanning","vulnerability-assessment","snapshot-analysis","vuls","tenable",{"skillNo":556,"name":557,"nameZh":13,"description":558,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":559,"categories":560,"keywords":562,"publishedAt":238},"01M6AFKEXXYG72CEEZWJ0C3FVY","performing-adversary-in-the-middle-phishing-detection","Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens, correlating Azure AD\u002FEntra sign-in logs, SIEM alerts, and EDR telemetry. Use when investigating suspected MFA-bypass phishing or session token theft, or building detection and response playbooks against reverse-proxy phishing kits.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-adversary-in-the-middle-phishing-detection\u002FSKILL.md",[561],{"categoryNo":216,"categoryName":217,"taxonomyType":53,"taxonomyTypeDesc":54},[563,230,564,222,378,524,565,566,225,567,568,569,570,571,572,573,323,574,508,575],"phishing","performing adversary in the middle phishing detection","telemetry","azure","browser","proxy","logs","mfa","edr","defense","credential-theft","initial-access","aitm",{"skillNo":577,"name":578,"nameZh":13,"description":579,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":580,"categories":581,"keywords":582,"publishedAt":238},"01M6AFKBG67RV8JD73V8B9FW6V","performing-active-directory-vulnerability-assessment","Assess Active Directory security posture using PingCastle, BloodHound, and Purple Knight to identify misconfigurations, privilege escalation paths, and attack vectors.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-active-directory-vulnerability-assessment\u002FSKILL.md",[],[583,247,584,221,251,222,585,254,586,227,249,318,587,588,589,590,591],"directory","performing active directory vulnerability assessment","active-directory","ldap","bloodhound","kerberos","pingcastle","purple-knight","ad-security",95,18]