[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cat:01JBSEEDCAT000000000000033":3,"cat-list:01JBSEEDCAT000000000000033:stars:2":14},{"categoryNo":4,"taxonomyType":5,"taxonomyTypeDesc":6,"categoryName":7,"categoryNameEn":8,"description":9,"level":10,"skillCount":11,"parentNo":12,"parentName":12,"children":13},"01JBSEEDCAT000000000000033","PROFESSION","适用职业","数据分析师","Data Analyst","数据分析、报表与商业智能人员",1,4989,null,[],{"records":15,"total":11,"current":477,"size":478},[16,56,95,127,166,190,220,242,261,286,317,333,354,375,399,418,433,452],{"skillNo":17,"name":18,"nameZh":12,"description":19,"descriptionZh":12,"repositoryFullName":20,"ownerLogin":21,"ownerAvatarUrl":22,"ownerAccountNo":23,"ownerDisplayName":24,"repositoryNo":25,"starsCount":26,"licenseSpdxId":27,"licenseFileUrl":12,"sourceHtmlUrl":28,"categories":29,"keywords":34,"publishedAt":55},"01M6ADVNDA3PZYCQ6YTSXE9N63","migrating-oracle-to-postgres-data-access-code","Migrates .NET\u002FC# data access code from Oracle to PostgreSQL (Npgsql). Replaces Oracle NuGet packages, rewrites OracleConnection\u002FOracleCommand\u002FOracleDataReader usage, fixes DbType mappings, updates stored procedure invocation patterns, and adapts connection string configuration. Use when migrating the application code layer of a .NET project during an Oracle-to-PostgreSQL database migration.","github\u002Fawesome-copilot","github","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","01M6AC83DS133TPXFSP1DHNCC6","GitHub","01M6AD3PBDYPK7NVFJNJ66Y8RS",41028,"MIT","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fmigrating-oracle-to-postgres-data-access-code\u002FSKILL.md",[30,33],{"categoryNo":31,"categoryName":32,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000030","开发工程师",{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54],"oracle","code","data","migrating oracle to postgres data access code","access","postgres","packages","nuget","database","postgresql","use","migration","project","connection","C#","usage","updates","fixes","when","postgresql database","2026-11-10 10:12:30",{"skillNo":57,"name":58,"nameZh":12,"description":59,"descriptionZh":12,"repositoryFullName":20,"ownerLogin":21,"ownerAvatarUrl":22,"ownerAccountNo":23,"ownerDisplayName":24,"repositoryNo":25,"starsCount":26,"licenseSpdxId":27,"licenseFileUrl":12,"sourceHtmlUrl":60,"categories":61,"keywords":71,"publishedAt":55},"01M6ADF0NVEAYSHZ837WAQRJ8T","data-breach-blast-radius","Pre-breach impact analysis: inventories sensitive data (PII, PHI, PCI-DSS, credentials), traces data flows, scores exposure vectors, and produces a regulatory blast radius report with fine ranges sourced verbatim from GDPR Art. 83, CCPA § 1798.155(a), and HIPAA 45 CFR § 160.404. Cost benchmarks from IBM Cost of a Data Breach Report (annually updated). All citations in references\u002FSOURCES.md for verification. Use when asked: \"assess breach impact\", \"what data could be exposed\", \"calculate blast radius\", \"data exposure analysis\", \"how bad would a breach be\", \"quantify data risk\", \"sensitive data inventory\", \"data flow security audit\", \"pre-breach assessment\", \"worst-case breach scenario\", \"breach readiness\", \"data risk report\", \"\u002Fdata-breach-blast-radius\". For any stack handling user data, health records, or financial information. Output labels law-sourced figures (exact) vs heuristic estimates (planning only). Does not replace legal counsel.","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fdata-breach-blast-radius\u002FSKILL.md",[62,67,68],{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000037","律师与法务",[72,73,37,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,53],"blast radius","data breach blast radius","radius","breach","security","assessment","planning","report","verification","audit","Citations","pii","inventory","security audit","only","Art","cfr","impact","sources","information","flows","labels","data flow",{"skillNo":96,"name":97,"nameZh":12,"description":98,"descriptionZh":12,"repositoryFullName":20,"ownerLogin":21,"ownerAvatarUrl":22,"ownerAccountNo":23,"ownerDisplayName":24,"repositoryNo":25,"starsCount":26,"licenseSpdxId":27,"licenseFileUrl":12,"sourceHtmlUrl":99,"categories":100,"keywords":107,"publishedAt":55},"01M6ADC4Z4NNFQMK8BAJDS426N","copilot-cli-quickstart","Use this skill when someone wants to learn GitHub Copilot CLI from scratch. Offers interactive step-by-step tutorials with separate Developer and Non-Developer tracks, plus on-demand Q&A. Just say \"start tutorial\" or ask a question! Note: This skill targets GitHub Copilot CLI specifically and uses CLI-specific tools (ask_user, sql, fetch_copilot_cli_documentation).","https:\u002F\u002Fgithub.com\u002Fgithub\u002Fawesome-copilot\u002Fblob\u002Fmain\u002Fskills\u002Fcopilot-cli-quickstart\u002FSKILL.md",[101,104,105,106],{"categoryNo":102,"categoryName":103,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":31,"categoryName":32,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[108,109,110,111,112,21,113,114,115,116,117,118,119,120,121,122,123,124,125,126,53],"cli","copilot","copilot cli","quickstart","copilot cli quickstart","github copilot","documentation","sql","learn","developer","start","Tools","ask","question","fetch","tutorial","github copilot cli","q&a","tracks",{"skillNo":128,"name":129,"nameZh":12,"description":130,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":139,"categories":140,"keywords":148,"publishedAt":55},"01M6AGBBHZ9TH9YVD5CX4SRJS3","testing-for-sensitive-data-exposure","Identifying sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35884,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-sensitive-data-exposure\u002FSKILL.md",[141,144,145,146,147],{"categoryNo":142,"categoryName":143,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":102,"categoryName":103,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":31,"categoryName":32,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[149,37,150,76,151,152,153,154,155,156,157,158,159,160,161,162,83,163,164,165],"testing","testing for sensitive data exposure","cybersecurity","vulnerabilities","storage","web","pr","owasp","web-application-security","t1059","data-exposure","web-security","t1505","api-keys","application-security","api","secrets",{"skillNo":167,"name":168,"nameZh":12,"description":169,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":170,"categories":171,"keywords":175,"publishedAt":55},"01M6AG9FY71W57B5J77H22DYK2","securing-historian-server-in-ot-environment","Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT environments: Purdue-level network placement, interface access control, secure DMZ replication via data diodes or PI-to-PI connectors, SQL injection prevention, and process data integrity. Use when auditing or hardening a historian server, or designing secure OT-to-IT data replication through a DMZ.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-historian-server-in-ot-environment\u002FSKILL.md",[172,173,174],{"categoryNo":102,"categoryName":103,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[176,177,178,76,151,115,179,155,180,37,181,182,183,184,158,185,186,187,188,189],"server","historian","securing historian server in ot environment","secure","network","ot-security","osisoft-pi","data-integrity","t1078","injection","prevention","integrity","dmz","ICS-security",{"skillNo":191,"name":192,"nameZh":12,"description":193,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":194,"categories":195,"keywords":203,"publishedAt":55},"01M6AG9BVDC96VHN5HBP0KKQ04","securing-helm-chart-deployments","Secures Helm chart deployments by verifying chart signatures and provenance, rendering and linting templates for misconfiguration, enforcing pod security contexts through values.yaml, moving secrets into an external store instead of Helm values, and scoping RBAC for Helm operations in CI\u002FCD. Use when deploying charts to Kubernetes or reviewing chart provenance, templates, or release RBAC. Keywords: Helm, provenance file, helm verify, helm lint, values.yaml, Tiller-less, release RBAC, external secrets. Do not use for scanning the rendered manifests themselves - use scanning-kubernetes-manifests-with-kubesec.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fsecuring-helm-chart-deployments\u002FSKILL.md",[196,199,202],{"categoryNo":197,"categoryName":198,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":200,"categoryName":201,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000013","分析与可视化",{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[204,205,76,151,206,155,207,208,209,210,211,212,213,214,215,216,165,217,218,219],"securing helm chart deployments","kubernetes","rbac","deployment","lint","release","file","ci","container-security","supply-chain","t1195","misconfiguration","provenance","Charts","kubesec","helm",{"skillNo":221,"name":222,"nameZh":12,"description":223,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":224,"categories":225,"keywords":228,"publishedAt":55},"01M6AG6RKJM30QXKTAJY0WPJSJ","remediating-s3-bucket-misconfiguration","Provides step-by-step procedures for remediating Amazon S3 bucket misconfigurations that expose sensitive data: enabling S3 Block Public Access, auditing bucket policies and ACLs, enforcing encryption, configuring access logging, and deploying automated remediation with AWS Config and Lambda. Use when AWS Config or Security Hub flags public or unencrypted S3 buckets, or preparing audit evidence for storage security controls.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fremediating-s3-bucket-misconfiguration\u002FSKILL.md",[226,227],{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[229,215,230,76,151,153,231,232,81,233,37,234,235,236,237,184,238,239,240,241],"s3","remediating s3 bucket misconfiguration","config","logging","cloud-security","encryption","remediation","lambda","public-access","s3-security","bucket-misconfiguration","public-access-block","aws-config",{"skillNo":243,"name":244,"nameZh":12,"description":245,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":246,"categories":247,"keywords":251,"publishedAt":55},"01M6AG4MVCWXYKFX080YXZMFKT","performing-web-application-firewall-bypass","Bypasses Web Application Firewall protections using encoding tricks, HTTP method manipulation, parameter pollution, and payload obfuscation to smuggle SQL injection, XSS, and other exploit payloads past WAF detection rules. Use when a confirmed vulnerability is blocked by a WAF, during penetration tests or red team engagements requiring bypass of perimeter security controls, or when evaluating WAF rule effectiveness and bypass resistance.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-web-application-firewall-bypass\u002FSKILL.md",[248,249,250],{"categoryNo":102,"categoryName":103,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[154,252,253,76,151,115,254,155,255,256,157,158,185,160,257,258,161,163,259,260],"firewall","performing web application firewall bypass","http","waf","red team","xss","SQL-injection","evasion","vulnerability",{"skillNo":262,"name":263,"nameZh":12,"description":264,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":265,"categories":266,"keywords":270,"publishedAt":55},"01M6AG4B7MAXC592MBDVSPAAE8","performing-user-behavior-analytics","Performs User and Entity Behavior Analytics (UEBA) to detect anomalous user activities including impossible travel, unusual access patterns, privilege abuse, and insider threats using SIEM-based behavioral baselines and statistical analysis. Use when SOC teams need to identify compromised accounts or insider threats through deviation from established behavioral norms.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-user-behavior-analytics\u002FSKILL.md",[267,268,269],{"categoryNo":200,"categoryName":201,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[271,272,151,273,274,275,276,277,278,279,280,184,281,282,283,284,285],"analytics","performing user behavior analytics","siem","teams","soc","splunk","detection","anomaly-detection","UEBA","insider-threat","t1566","baseline","analysis","statistical analysis","user-behavior",{"skillNo":287,"name":288,"nameZh":12,"description":289,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":290,"categories":291,"keywords":303,"publishedAt":55},"01M6AG43AKSG13NXT18JNVVAE0","performing-threat-modeling-with-owasp-threat-dragon","Uses OWASP Threat Dragon (web or desktop) to build data flow diagrams, identify threats with STRIDE, LINDDUN, CIA, DIE, or PLOT4ai methodologies via its auto-generation rule engine, and produce PDF threat model reports. Use during secure design review of an application architecture to build a formal threat model and document mitigations for GRC compliance.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-threat-modeling-with-owasp-threat-dragon\u002FSKILL.md",[292,295,298,299,302],{"categoryNo":293,"categoryName":294,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":296,"categoryName":297,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":300,"categoryName":301,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000032","设计师",{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[304,156,305,306,307,308,309,310,151,311,179,155,312,313,314,37,315,158,214,316],"threat modeling","performing threat modeling with owasp threat dragon","PDF","design","review","design review","devsecops","architecture","threat model","produce","flow","threat-modeling","grc",{"skillNo":318,"name":319,"nameZh":12,"description":320,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":321,"categories":322,"keywords":326,"publishedAt":55},"01M6AG1EK63M1CZCCJ4ZY69WAZ","performing-second-order-sql-injection","Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-second-order-sql-injection\u002FSKILL.md",[323,324,325],{"categoryNo":102,"categoryName":103,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[115,185,327,328,76,151,152,154,155,43,157,158,329,160,330,258,161,163,331,332],"performing second order sql injection","malicious","sqli","database-security","second-order-sqli","stored-sql-injection",{"skillNo":334,"name":335,"nameZh":12,"description":336,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":337,"categories":338,"keywords":342,"publishedAt":55},"01M6AFZXDJZQ9EABKAC2Y5DXRB","performing-privacy-impact-assessment","Automates the Privacy Impact Assessment (PIA) workflow including data flow mapping, privacy risk scoring matrices, GDPR Article 35 DPIA and CCPA\u002FCPRA alignment checks, data inventory cataloging, and remediation tracking. Implements the NIST Privacy Framework PRAM methodology and ICO DPIA guidance for systematic identification and mitigation of privacy risks across processing activities. Use when conducting privacy assessments for new systems, evaluating regulatory compliance posture, or building automated privacy governance programs.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-privacy-impact-assessment\u002FSKILL.md",[339,340,341],{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},[77,343,344,151,345,346,155,347,314,37,348,235,349,350,184,158,351,84,352,353],"privacy","performing privacy impact assessment","workflow","risk scoring","framework","NIST","dpia","ico","risk","impact-assessment","data-flow-mapping",{"skillNo":355,"name":356,"nameZh":12,"description":357,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":358,"categories":359,"keywords":364,"publishedAt":55},"01M6AFWT2912TB8DX4DCSXR3MH","performing-log-source-onboarding-in-siem","Perform structured log source onboarding into SIEM platforms (Splunk, Elastic, Sentinel, QRadar, or similar) by prioritizing sources with a tiered value framework, configuring collectors, building parsers, normalizing fields to a common schema (e.g. CIM), and validating data quality. Use when planning or executing the integration of new log sources — such as Active Directory, firewalls, EDR, VPN, DNS, or cloud audit logs — into a SIEM for security monitoring and detection.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-log-source-onboarding-in-siem\u002FSKILL.md",[360,361],{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":362,"categoryName":363,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000038","人力资源",[273,365,366,367,76,151,347,81,368,369,275,370,276,37,371,372,373,184,281,374],"onboarding","performing log source onboarding in siem","directory","logs","monitoring","dns","elastic","sentinel","edr","log-management",{"skillNo":376,"name":377,"nameZh":12,"description":378,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":379,"categories":380,"keywords":385,"publishedAt":55},"01M6AFV6S9YF1NMCBR0KR7XF15","performing-insider-threat-investigation","Investigates insider threat incidents involving employees, contractors, or trusted partners who misuse authorized access to steal data, sabotage systems, or violate security policies, combining digital forensics, user behavior analytics, and HR\u002Flegal coordination to build an evidence-based case. Use when DLP alerts flag large data transfers to personal cloud storage or USB devices, when UBA detects anomalous access patterns for a user account, or when investigating employee data theft, privilege misuse, or internal threat detection requests.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-insider-threat-investigation\u002FSKILL.md",[381,382,383,384],{"categoryNo":200,"categoryName":201,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},[386,387,388,76,151,153,271,389,390,391,392,37,280,393,394,184,395,396,397,398],"investigation","performing insider threat investigation","personal","partners","exfiltration","dfir","data-exfiltration","dlp","behavior-analytics","t1490","devices","user-behavior-analytics","privilege-misuse",{"skillNo":400,"name":401,"nameZh":12,"description":402,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":403,"categories":404,"keywords":407,"publishedAt":55},"01M6AFPF0RETMB8CDRV1EV19VY","performing-cloud-log-forensics-with-athena","Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation. Covers CREATE TABLE DDL with partition projection, forensic SQL queries for detecting unauthorized access, data exfiltration, lateral movement, and privilege escalation. Use when investigating AWS security incidents or building cloud-native forensic workflows at scale.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-cloud-log-forensics-with-athena\u002FSKILL.md",[405,406],{"categoryNo":102,"categoryName":103,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},[408,409,410,76,151,411,115,155,412,368,233,390,314,37,413,184,414,415,416,417],"cloud","forensics","performing cloud log forensics with athena","workflows","create","escalation","vpc","athena","vpc-flow-logs","alb",{"skillNo":419,"name":420,"nameZh":12,"description":421,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":422,"categories":423,"keywords":427,"publishedAt":55},"01M6AFGKY0Z6ANSF18J23RTPKR","investigating-insider-threat-indicators","Investigates insider threat indicators including data exfiltration attempts, unauthorized access patterns, policy violations, and pre-departure behaviors using SIEM analytics, DLP alerts, and HR data correlation. Use when SOC teams receive insider threat referrals from HR, detect anomalous data movement by employees, or need to build investigation timelines for potential insider threats.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Finvestigating-insider-threat-indicators\u002FSKILL.md",[424,425,426],{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":362,"categoryName":363,"taxonomyType":5,"taxonomyTypeDesc":6},[428,429,430,151,273,271,274,275,390,392,37,431,279,280,393,184,281,386,432],"indicators","investigating insider threat indicators","policy","correlation","hr-correlation",{"skillNo":434,"name":435,"nameZh":12,"description":436,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":437,"categories":438,"keywords":443,"publishedAt":55},"01M6AFAQX1AJHV51SZ4Z35CX9Z","implementing-pci-dss-compliance-controls","Implements PCI DSS 4.0.1's 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data, including the customized validation approach, enhanced authentication, and continuous monitoring controls introduced by the 51 requirements mandatory since March 2025. Use when scoping a cardholder data environment, building PCI DSS 4.0.1 compliance controls, or preparing for a PCI assessment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-pci-dss-compliance-controls\u002FSKILL.md",[439,440,441,442],{"categoryNo":142,"categoryName":143,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},[444,445,76,151,446,155,77,447,448,369,37,184,449,450,451],"compliance","implementing pci dss compliance controls","governance","authentication","validation","pci-dss","payment-security","cardholder-data",{"skillNo":453,"name":454,"nameZh":12,"description":455,"descriptionZh":12,"repositoryFullName":131,"ownerLogin":132,"ownerAvatarUrl":133,"ownerAccountNo":134,"ownerDisplayName":135,"repositoryNo":136,"starsCount":137,"licenseSpdxId":138,"licenseFileUrl":12,"sourceHtmlUrl":456,"categories":457,"keywords":467,"publishedAt":55},"01M6AF5CPV3RZ7NWM6GAKT6Y07","implementing-gdpr-data-subject-access-request","Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across databases and files using regex and NER, data mapping, response templating per Article 15 requirements, deadline tracking, and audit logging. Covers ICO\u002FEDPB guidance compliance, exemption handling, and scalable batch processing. Use when building or auditing DSAR response capabilities under GDPR\u002FUK GDPR.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-gdpr-data-subject-access-request\u002FSKILL.md",[458,461,462,463,466],{"categoryNo":459,"categoryName":460,"taxonomyType":65,"taxonomyTypeDesc":66},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":63,"categoryName":64,"taxonomyType":65,"taxonomyTypeDesc":66},{"categoryNo":4,"categoryName":7,"taxonomyType":5,"taxonomyTypeDesc":6},{"categoryNo":464,"categoryName":465,"taxonomyType":5,"taxonomyTypeDesc":6},"01JBSEEDCAT000000000000036","内容创作者",{"categoryNo":69,"categoryName":70,"taxonomyType":5,"taxonomyTypeDesc":6},[468,37,469,151,411,470,155,471,80,232,472,81,473,350,184,158,83,474,475,476],"gdpr","implementing gdpr data subject access request","identity","capabilities","batch","data-subject-rights","dsar","pii-discovery","article-15",2,18]