[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:stats":3,"skills:pro6":8,"skills:creators9":55,"skills:sce6":151,"skills:all:stars:99:":196},{"skillCount":4,"professionCount":5,"scenarioCount":6,"creatorCount":7},196852,11,7,1926,[9,20,27,34,41,48],{"categoryNo":10,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":13,"categoryNameEn":14,"description":15,"level":16,"skillCount":17,"parentNo":18,"parentName":18,"children":19},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13274,null,[],{"categoryNo":21,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":22,"categoryNameEn":23,"description":24,"level":16,"skillCount":25,"parentNo":18,"parentName":18,"children":26},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7775,[],{"categoryNo":28,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":29,"categoryNameEn":30,"description":31,"level":16,"skillCount":32,"parentNo":18,"parentName":18,"children":33},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":35,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":36,"categoryNameEn":37,"description":38,"level":16,"skillCount":39,"parentNo":18,"parentName":18,"children":40},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":42,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":43,"categoryNameEn":44,"description":45,"level":16,"skillCount":46,"parentNo":18,"parentName":18,"children":47},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":49,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":50,"categoryNameEn":51,"description":52,"level":16,"skillCount":53,"parentNo":18,"parentName":18,"children":54},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],{"records":56,"total":149,"current":16,"size":150},[57,69,78,88,98,108,118,127,137],{"accountNo":58,"login":59,"displayName":60,"avatarUrl":61,"accountType":62,"accountTypeDesc":63,"profileDescription":64,"skillCount":65,"repoCount":66,"professionCount":5,"scenarioCount":6,"totalStars":67,"updatedAt":68},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,828772,"2026-11-13 04:10:52",{"accountNo":70,"login":71,"displayName":71,"avatarUrl":72,"accountType":62,"accountTypeDesc":63,"profileDescription":73,"skillCount":74,"repoCount":75,"professionCount":6,"scenarioCount":6,"totalStars":76,"updatedAt":77},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":79,"login":80,"displayName":81,"avatarUrl":82,"accountType":62,"accountTypeDesc":63,"profileDescription":18,"skillCount":83,"repoCount":84,"professionCount":6,"scenarioCount":85,"totalStars":86,"updatedAt":87},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":89,"login":90,"displayName":91,"avatarUrl":92,"accountType":62,"accountTypeDesc":63,"profileDescription":18,"skillCount":93,"repoCount":94,"professionCount":95,"scenarioCount":6,"totalStars":96,"updatedAt":97},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":99,"login":100,"displayName":101,"avatarUrl":102,"accountType":62,"accountTypeDesc":63,"profileDescription":103,"skillCount":104,"repoCount":105,"professionCount":5,"scenarioCount":6,"totalStars":106,"updatedAt":107},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242366,"2026-11-13 04:17:09",{"accountNo":109,"login":110,"displayName":111,"avatarUrl":112,"accountType":62,"accountTypeDesc":63,"profileDescription":113,"skillCount":114,"repoCount":115,"professionCount":5,"scenarioCount":6,"totalStars":116,"updatedAt":117},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",940,28,238441,"2026-11-13 03:57:35",{"accountNo":119,"login":120,"displayName":121,"avatarUrl":122,"accountType":62,"accountTypeDesc":63,"profileDescription":18,"skillCount":123,"repoCount":124,"professionCount":5,"scenarioCount":6,"totalStars":125,"updatedAt":126},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231826,"2026-11-13 04:18:26",{"accountNo":128,"login":129,"displayName":130,"avatarUrl":131,"accountType":62,"accountTypeDesc":63,"profileDescription":18,"skillCount":132,"repoCount":133,"professionCount":134,"scenarioCount":6,"totalStars":135,"updatedAt":136},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":138,"login":139,"displayName":140,"avatarUrl":141,"accountType":142,"accountTypeDesc":143,"profileDescription":144,"skillCount":145,"repoCount":146,"professionCount":85,"scenarioCount":6,"totalStars":147,"updatedAt":148},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174614,"2026-11-13 04:05:07",1921,9,[152,161,168,175,182,189],{"categoryNo":153,"taxonomyType":154,"taxonomyTypeDesc":155,"categoryName":156,"categoryNameEn":157,"description":158,"level":16,"skillCount":159,"parentNo":18,"parentName":18,"children":160},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39458,[],{"categoryNo":162,"taxonomyType":154,"taxonomyTypeDesc":155,"categoryName":163,"categoryNameEn":164,"description":165,"level":16,"skillCount":166,"parentNo":18,"parentName":18,"children":167},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26531,[],{"categoryNo":169,"taxonomyType":154,"taxonomyTypeDesc":155,"categoryName":170,"categoryNameEn":171,"description":172,"level":16,"skillCount":173,"parentNo":18,"parentName":18,"children":174},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13569,[],{"categoryNo":176,"taxonomyType":154,"taxonomyTypeDesc":155,"categoryName":177,"categoryNameEn":178,"description":179,"level":16,"skillCount":180,"parentNo":18,"parentName":18,"children":181},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":183,"taxonomyType":154,"taxonomyTypeDesc":155,"categoryName":184,"categoryNameEn":185,"description":186,"level":16,"skillCount":187,"parentNo":18,"parentName":18,"children":188},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":190,"taxonomyType":154,"taxonomyTypeDesc":155,"categoryName":191,"categoryNameEn":192,"description":193,"level":16,"skillCount":194,"parentNo":18,"parentName":18,"children":195},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":197,"total":4,"current":587,"size":588},[198,234,254,281,304,330,350,364,389,407,432,449,470,489,505,524,549,569],{"skillNo":199,"name":200,"nameZh":18,"description":201,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":210,"categories":211,"keywords":212,"publishedAt":233},"01M6AFD9EMYB9HQRDQV94X51Z3","implementing-siem-use-case-tuning","Tune SIEM detection rules in Splunk and Elastic to reduce false positives by analyzing alert volumes, creating context-aware exclusion lists, adjusting thresholds against environmental baselines, and measuring precision\u002Frecall efficacy metrics. Use when a SOC is drowning in noisy alerts and needs to tune correlation searches or detection rules, or when measuring and reporting alert-to-incident conversion rates.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-siem-use-case-tuning\u002FSKILL.md",[],[213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232],"siem","tuning","implementing siem use case tuning","security","cybersecurity","reporting","engineering","security-operations","soc","splunk","analyzing","detection-engineering","elastic","correlation","detection","t1078","t1059","false-positive","false-positive-reduction","alert-tuning","2026-11-10 10:12:30",{"skillNo":235,"name":236,"nameZh":18,"description":237,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":238,"categories":239,"keywords":240,"publishedAt":233},"01M6AFD6KFWESW75GVG3DQBWWD","implementing-siem-correlation-rules-for-apt","Write multi-event correlation rules in Splunk SPL and Sigma format that detect APT lateral movement by chaining Windows authentication events (4624, 4648), process execution (4688, Sysmon Event 1), and network connections (Sysmon Event 3) across hosts within sliding time windows. Use when building SIEM correlation searches to surface multi-stage attack sequences that single-event detections miss, such as pass-the-hash or lateral movement chains.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-siem-correlation-rules-for-apt\u002FSKILL.md",[],[213,241,226,242,216,217,243,244,245,220,222,246,247,248,249,250,251,252,253,228],"apt","implementing siem correlation rules for apt","windows","authentication","logs","network","SPL","sysmon","event-logs","sigma","lateral-movement","pass-the-hash","windows-event-logs",{"skillNo":255,"name":256,"nameZh":18,"description":257,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":258,"categories":259,"keywords":266,"publishedAt":233},"01M6AFD3FS9RHV5GE81EFQ6PBY","implementing-semgrep-for-custom-sast-rules","Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI\u002FCD pipelines.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-semgrep-for-custom-sast-rules\u002FSKILL.md",[260,263],{"categoryNo":261,"categoryName":262,"taxonomyType":154,"taxonomyTypeDesc":155},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},"01JBSEEDCAT000000000000011","运维与部署",[267,268,269,270,216,217,271,272,273,274,275,276,277,229,278,279,280],"sast","semgrep","implementing semgrep for custom sast rules","devsecops","vulnerabilities","pr","code","coding standards","yaml","ci","static-analysis","t1195","custom-rules","code-security",{"skillNo":282,"name":283,"nameZh":18,"description":284,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":285,"categories":286,"keywords":290,"publishedAt":233},"01M6AFD0G8QZKT6XWQYT0MNS94","implementing-security-monitoring-with-datadog","Implements security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection to detect threats, enforce compliance, and respond to security events across cloud and hybrid infrastructure. Covers Agent deployment, log source ingestion, detection rule creation, security dashboards, and automated notification workflows. Activates for requests involving Datadog security setup, Cloud SIEM configuration, CSM threat detection, or security monitoring dashboards.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-security-monitoring-with-datadog\u002FSKILL.md",[287],{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},"01JBSEEDCAT000000000000023","Skill与智能体开发",[216,291,292,293,217,213,294,295,296,297,244,298,220,299,300,301,302,228,229,303],"monitoring","implementing security monitoring with datadog","policy","workflows","workload","infrastructure","deployment","cloud security","cloud-security","log-analysis","security-monitoring","detection-rules","datadog",{"skillNo":305,"name":306,"nameZh":18,"description":307,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":308,"categories":309,"keywords":311,"publishedAt":233},"01M6AFCXHP2A5JRASEW4CJ77MZ","implementing-security-information-sharing-with-stix2","Create, validate, and share STIX 2.1 threat intelligence objects (indicators, malware, campaigns, relationships, bundles) using the stix2 Python library, and publish them over TAXII 2.1. Use when building or exchanging structured threat intelligence, modeling relationships between threat objects, or publishing\u002Fconsuming a TAXII 2.1 feed.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-security-information-sharing-with-stix2\u002FSKILL.md",[310],{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[216,312,313,314,217,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329],"sharing","implementing security information sharing with stix2","python","threat intelligence","validate","create","validation","share","protocol","file","threat-intelligence","malware","stix","publish","TAXII","threat-sharing","indicators","intelligence-exchange",{"skillNo":331,"name":332,"nameZh":18,"description":333,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":334,"categories":335,"keywords":337,"publishedAt":233},"01M6AFCTDCJGZDVV86QXY14JGA","implementing-security-chaos-engineering","Implements security chaos engineering experiments that deliberately disable or degrade security controls to verify detection and response capabilities. Tests WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement scenarios using boto3 and subprocess. Use when validating SOC detection coverage and resilience.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-security-chaos-engineering\u002FSKILL.md",[336],{"categoryNo":261,"categoryName":262,"taxonomyType":154,"taxonomyTypeDesc":155},[216,219,338,339,217,340,318,341,342,220,221,343,344,345,346,228,229,347,348,349],"implementing security chaos engineering","testing","resilience","capabilities","waf","pipeline","firewall","edr","boto3","security-chaos-engineering","resilience-testing","control-validation",{"skillNo":351,"name":352,"nameZh":18,"description":353,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":354,"categories":355,"keywords":357,"publishedAt":233},"01M6AFCQNPC2C30MN93KHX2YR1","implementing-secrets-scanning-in-ci-cd","Integrate gitleaks and trufflehog into CI\u002FCD pipelines to detect leaked secrets before deployment","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-secrets-scanning-in-ci-cd\u002FSKILL.md",[356],{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},[358,276,359,270,217,272,297,360,361,229,278,362,363],"ci cd","implementing secrets scanning in ci cd","ci-cd","trufflehog","gitleaks","secrets-scanning",{"skillNo":365,"name":366,"nameZh":18,"description":367,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":368,"categories":369,"keywords":375,"publishedAt":233},"01M6AFCMQBGYHC6XYZFDE34AZ6","implementing-secrets-management-with-vault","Deploy HashiCorp Vault for centralized secrets management, covering dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes integration. Use when eliminating hardcoded credentials from application code or CI\u002FCD pipelines, migrating to short-lived auto-rotated secrets, or giving Kubernetes workloads secure access to database or cloud provider credentials.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-secrets-management-with-vault\u002FSKILL.md",[370,373,374],{"categoryNo":371,"categoryName":372,"taxonomyType":154,"taxonomyTypeDesc":155},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[376,377,216,217,378,272,273,379,276,299,380,381,382,383,384,228,385,386,387,388],"implementing secrets management with vault","kubernetes","secure","database","ZeRO","encryption","zero-trust","pki","t1003","Providers","HashiCorp-Vault","dynamic-secrets","secrets-management",{"skillNo":390,"name":391,"nameZh":18,"description":392,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":393,"categories":394,"keywords":397,"publishedAt":233},"01M6AFCH9N2EVSEA02KTSC61NB","implementing-secret-scanning-with-gitleaks","This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories. It addresses configuring pre-commit hooks, CI\u002FCD pipeline integration, custom rule authoring for organization-specific secrets, baseline management for existing repositories, and remediation workflows for exposed credentials.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-secret-scanning-with-gitleaks\u002FSKILL.md",[395,396],{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[398,362,399,270,217,294,400,378,272,401,276,343,402,384,229,278,403,404,405,406],"secret scanning","implementing secret scanning with gitleaks","commit","git","remediation","cicd","baseline","secret-scanning","pre-commit",{"skillNo":408,"name":409,"nameZh":18,"description":410,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":411,"categories":412,"keywords":414,"publishedAt":233},"01M6AFCDRKW4A1W46H8SBQT8KF","implementing-scim-provisioning-with-okta","Implement automated user lifecycle provisioning and deprovisioning using the SCIM 2.0 protocol with Okta as the identity provider. Use when automating account creation, attribute sync, or deactivation across downstream applications through Okta SCIM integration, or when troubleshooting SCIM provisioning failures.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-scim-provisioning-with-okta\u002FSKILL.md",[413],{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[415,416,417,217,418,419,420,421,422,272,423,424,425,228,426,427,428,429,430,431],"okta","provisioning","implementing scim provisioning with okta","implement","automation","change","sync","identity","development","sso","lifecycle-management","initial-access","t1098","applications","lifecycle","scim","identity-management",{"skillNo":433,"name":434,"nameZh":18,"description":435,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":436,"categories":437,"keywords":440,"publishedAt":233},"01M6AFCAKGK16Q8VJHZ6QG9PZP","implementing-saml-sso-with-okta","Implement SAML 2.0 Single Sign-On using Okta as the Identity Provider, covering SP-initiated and IdP-initiated flows, attribute mapping, certificate management, SHA-256 signature enforcement, and Single Logout. Use when configuring Okta SAML SSO for an application, hardening SAML certificate rotation and signing, or testing and troubleshooting SAML assertion flows with a tracer tool.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-saml-sso-with-okta\u002FSKILL.md",[438,439],{"categoryNo":261,"categoryName":262,"taxonomyType":154,"taxonomyTypeDesc":155},{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[441,424,415,442,339,217,418,443,422,272,423,244,444,445,446,447,228,426,427,448],"saml","implementing saml sso with okta","web","access-control","iam","hardening","t1550","sha-256",{"skillNo":450,"name":451,"nameZh":18,"description":452,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":453,"categories":454,"keywords":456,"publishedAt":233},"01M6AFC6YHM8QK33PQKZKH18BM","implementing-runtime-security-with-tetragon","Implements eBPF-based runtime observability and in-kernel enforcement in Kubernetes with Cilium Tetragon, monitoring process execution, file access, network connections, and syscalls, and blocking dangerous calls at the kernel level. Use when deploying Tetragon to detect or block syscalls such as ptrace, mount, and unshare, enforcing kernel-level policy, or adding low-overhead runtime detection to a cluster. Keywords: Tetragon, Cilium, eBPF, TracingPolicy, kprobe, enforcement, process lineage. Do not use for Falco-based detection - use detecting-container-runtime-threats-with-falco.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-runtime-security-with-tetragon\u002FSKILL.md",[455],{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},[216,457,458,459,460,377,293,217,272,461,462,463,291,464,246,465,466,467,468,469],"tetragon","implementing runtime security with tetragon","file access","kernel","ebpf","observability","lineage","container-security","runtime-security","falco","cilium","kernel-security","cncf",{"skillNo":471,"name":472,"nameZh":18,"description":473,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":474,"categories":475,"keywords":478,"publishedAt":233},"01M6AFC3PPXT5GQF0FEC9TH1C0","implementing-runtime-application-self-protection","Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-runtime-application-self-protection\u002FSKILL.md",[476,477],{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[479,314,270,293,217,443,272,480,481,482,227,228,229,483,484,428,485,486,487,488],"implementing runtime application self protection","pattern detection","java","integration","rce","xss","rasp","application-security","openrasp","runtime-protection",{"skillNo":490,"name":491,"nameZh":18,"description":492,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":493,"categories":494,"keywords":495,"publishedAt":233},"01M6AFC0CRQGQW5QX8RRH090FX","implementing-rsa-key-pair-management","Generates, stores, rotates, and manages RSA key pairs following NIST SP 800-57 guidelines, covering serialization formats (PEM, DER, PKCS#8), passphrase protection, and key strength validation. Use when creating or rotating RSA keys for signatures, key exchange, or encryption, or when auditing existing keys for proper storage and NIST-compliant strength.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-rsa-key-pair-management\u002FSKILL.md",[],[496,217,497,272,498,318,499,381,500,501,383,502,503,504],"implementing rsa key pair management","storage","guidelines","serialization","NIST","cryptography","key-management","rsa","asymmetric-encryption",{"skillNo":506,"name":507,"nameZh":18,"description":508,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":509,"categories":510,"keywords":512,"publishedAt":233},"01M6AFBXBD5SEXKXQJ7XBPNE87","implementing-rbac-hardening-for-kubernetes","Hardens Kubernetes RBAC by designing least-privilege Roles and ClusterRoles, auditing RoleBindings, eliminating cluster-admin sprawl, separating service accounts, and integrating an external OIDC identity provider. Use when tightening cluster access control, removing excessive ClusterRoleBindings, or hardening service-account permissions against escalation and lateral movement. Keywords: RBAC, Role, ClusterRole, RoleBinding, least privilege, service account, OIDC, cluster-admin. Do not use for discovering existing escalation paths - use auditing-kubernetes-rbac-privilege-escalation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-rbac-hardening-for-kubernetes\u002FSKILL.md",[511],{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},[377,513,446,514,216,217,422,272,515,516,517,464,444,518,445,519,520,521,522,523],"rbac","implementing rbac hardening for kubernetes","permissions","admin","privilege-escalation","security-hardening","service-accounts","service-account","least-privilege","escalation","oidc",{"skillNo":525,"name":526,"nameZh":18,"description":527,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":528,"categories":529,"keywords":533,"publishedAt":233},"01M6AFBS2RXN6XBRYVWPWSXVZ6","implementing-rapid7-insightvm-for-scanning","Deploy and configure Rapid7 InsightVM Security Console and Scan Engines, including scan templates, credentialed scanning, and Insight Agent integration, for authenticated and unauthenticated vulnerability scanning across enterprise environments. Use when standing up InsightVM infrastructure, configuring credentialed vulnerability scans, or integrating continuous asset assessment via the Insight Agent.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-rapid7-insightvm-for-scanning\u002FSKILL.md",[530,531,532],{"categoryNo":371,"categoryName":372,"taxonomyType":154,"taxonomyTypeDesc":155},{"categoryNo":264,"categoryName":265,"taxonomyType":154,"taxonomyTypeDesc":155},{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[534,216,217,535,296,536,537,538,482,539,540,541,542,543,544,545,546,547,548],"implementing rapid7 insightvm for scanning","deploy","assessment","console","vulnerability scanning","Enterprise","templates","vulnerability-management","vulnerability-scanning","asset-discovery","rapid7","insightvm","nexpose","scan-engine","authenticated-scanning",{"skillNo":550,"name":551,"nameZh":18,"description":552,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":553,"categories":554,"keywords":556,"publishedAt":233},"01M6AFBNG6SVAMSYQVM80TPNP6","implementing-ransomware-kill-switch-detection","Analyzes ransomware kill switch mechanisms, including mutex-based execution guards, domain-based kill switches (e.g. WannaCry-style), and registry termination checks, then implements mutex vaccination and kill switch domain monitoring to stop ransomware before it runs. Use when analyzing a sample's execution guards or deploying vaccination\u002Fmonitoring as a defensive control.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-ransomware-kill-switch-detection\u002FSKILL.md",[555],{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[557,227,558,217,272,559,291,323,560,223,561,562,228,563,564,229,565,566,567,568],"ransomware","implementing ransomware kill switch detection","registry","malware-analysis","cryptocurrency","defense","Tools","execution","t1490","kill-switch","mutex","WannaCry",{"skillNo":570,"name":571,"nameZh":18,"description":572,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":573,"categories":574,"keywords":577,"publishedAt":233},"01M6AFBJ6VPQ845NK29S31FFBJ","implementing-ransomware-backup-strategy","Designs a ransomware-resilient backup strategy using the 3-2-1-1-0 methodology (3 copies, 2 media types, 1 offsite, 1 immutable\u002Fair-gapped, 0 restore errors), configuring RPO\u002FRTO-aligned schedules, isolating backup credentials, and automating restore testing. Use when planning ransomware backup resilience or air-gapped\u002Fimmutable backup architecture.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-ransomware-backup-strategy\u002FSKILL.md",[575,576],{"categoryNo":261,"categoryName":262,"taxonomyType":154,"taxonomyTypeDesc":155},{"categoryNo":288,"categoryName":289,"taxonomyType":154,"taxonomyTypeDesc":155},[557,578,579,339,217,497,580,340,272,581,582,561,583,562,384,228,229,584,585,586],"backup","implementing ransomware backup strategy","architecture","planning","incident-response","methodology","immutable","recovery","immutable-storage",99,18]