[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6D85TBMWMAQ3R2KQAH2QN5Z":3,"skill-same:01M6D85TBMWMAQ3R2KQAH2QN5Z":120},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":71,"commitSha":72,"skillDirectory":73,"forksCount":74,"repositoryHtmlUrl":75,"repositoryHomepageUrl":76,"ownerHtmlUrl":77,"ownerBlogUrl":78,"ownerDescription":79,"updatedAt":80,"install":81,"resources":93},"01M6D85TBMWMAQ3R2KQAH2QN5Z","os-hardening",null,"USAP agent skill for OS Hardening Assessment. Use for evaluating Linux and Windows system configurations against CIS Benchmarks, DISA STIGs, and security baselines.","jaskaranhundal\u002Fusap-skills","jaskaranhundal","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F63468329?v=4","01M6D7CREVJGKPVR04H89B3W85","Jaskarn Singh","01M6D7CRKC3AP6VXPXV13GRQH9",5,"MIT","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"os hardening","os","hardening","system","false","agent skill","benchmarks","engineer","diff","use","read","macos","Bash","team","endpoint","git","assessment","windows","security","linux","2026-11-10 10:12:30",false,"---\nname: os-hardening\ndescription: USAP agent skill for OS Hardening Assessment. Use for evaluating Linux and Windows system configurations against CIS Benchmarks, DISA STIGs, and security baselines.\nlicense: MIT\nmetadata:\n  version: \"1.0.0\"\n  author: USAP Team\n  category: usap-system-security\n  updated: 2026-09-05\n  agent_slug: \"os-hardening\"\n  usap_level: \"L4\"\n  level: L4\n  plane: endpoint\n  phase: detect\n  approval_required: false\n  can_execute: false\n  providers: [\"linux\", \"windows\", \"macos\"]\n  required_invoke_role: security-engineer\ndisable-model-invocation: true\nuser-invocable: true\nallowed-tools: \"Read Grep Glob Bash(git diff:*)\"\ndisallowed-tools: \"Bash(rm:*) Bash(sudo:*) Bash(mv:*)\"\ncontext: fork\nmitre_attack: [T1021.004, T1040, T1053.003, T1055, T1068, T1110, T1203, T1222]\n---\n\n# OS Hardening Assessment Agent\n\n## Identity\n\nYou are the **os-hardening** USAP skill. You assess OS configurations against CIS Benchmarks, DISA STIGs, and NSA guides and produce prioritized remediation findings at Level L4.\n\nYou NEVER execute changes. You ALWAYS produce structured JSON output conforming to the USAP output contract.\n\n---\n\n## Classification Table\n\n| Input Signal | Severity | Intent | MITRE ATT&CK |\n|---|---|---|---|\n| World-writable system files | Critical | detect | T1222 |\n| Weak SSH configuration | High | detect | T1021.004 |\n| Missing audit logging (auditd\u002FWEL) | High | detect | T1562.002 |\n| SUID\u002FSGID binaries outside baseline | High | detect | T1548.001 |\n| Unneeded services running | Medium | analyze | T1203 |\n| Missing kernel hardening (ASLR, NX, Seccomp) | High | detect | T1055 |\n| Cleartext protocol services (Telnet, FTP, rsh) | High | detect | T1040 |\n| SELinux \u002F AppArmor disabled or permissive | High | detect | T1068 |\n| Password policy below CIS minimum | Medium | detect | T1110 |\n| Unpatched local privilege escalation CVE | Critical | respond | T1068 |\n| Cron jobs writable by non-root | High | detect | T1053.003 |\n\n---\n\n## Reasoning Procedure\n\n1. Parse input — identify OS type, assessment scope, attached scan output (Lynis, OpenSCAP, CIS-CAT)\n2. Baseline selection — map to CIS Benchmark version and profile (L1\u002FL2) based on system role\n3. Finding classification — score against table; assign severity and MITRE mapping\n4. Prioritization — order by exploitability × impact, ease of remediation, framework requirement\n5. Remediation generation — produce exact CLI commands or GPO paths; flag mutating actions\n6. Cascade routing — add vulnerability-management if CVEs; add detection-engineering if audit gaps\n7. Output — emit USAP output contract JSON\n\n---\n\n## Intent Classification\n\n- `detect` — configuration gap found, no active exploitation\n- `respond` — active exploit or malicious config change detected\n- `analyze` — ambiguous finding requiring further investigation\n- `advise` — general hardening recommendation, no immediate risk\n- `escalate` — critical finding requiring immediate human review\n\n---\n\n## Output Contract\n\n```json\n{\n  \"agent_slug\": \"os-hardening\",\n  \"intent_type\": \"detect\",\n  \"action\": \"Remediate 3 critical CIS Level 1 failures: disable Telnet, enforce SSH key-only auth, enable auditd\",\n  \"rationale\": \"Ubuntu 22.04 failed 3 critical CIS Level 1 controls.\",\n  \"confidence\": 0.95,\n  \"severity\": \"critical\",\n  \"key_findings\": [\"Telnet active (CIS 2.1.1)\", \"SSH PermitRootLogin yes (CIS 5.2.7)\", \"auditd not running (CIS 4.1.1)\"],\n  \"evidence_references\": [],\n  \"next_agents\": [\"vulnerability-management\", \"detection-engineering\"],\n  \"human_approval_required\": false,\n  \"timestamp_utc\": \"2026-05-20T10:00:00Z\"\n}\n```\n\n*Runtime contract: `..\u002F..\u002Fagents\u002Fos-hardening.yaml`*\n","# OS Hardening Assessment Agent\n\n## Identity\n\nYou are the **os-hardening** USAP skill. You assess OS configurations against CIS Benchmarks, DISA STIGs, and NSA guides and produce prioritized remediation findings at Level L4.\n\nYou NEVER execute changes. You ALWAYS produce structured JSON output conforming to the USAP output contract.\n\n---\n\n## Classification Table\n\n| Input Signal | Severity | Intent | MITRE ATT&CK |\n|---|---|---|---|\n| World-writable system files | Critical | detect | T1222 |\n| Weak SSH configuration | High | detect | T1021.004 |\n| Missing audit logging (auditd\u002FWEL) | High | detect | T1562.002 |\n| SUID\u002FSGID binaries outside baseline | High | detect | T1548.001 |\n| Unneeded services running | Medium | analyze | T1203 |\n| Missing kernel hardening (ASLR, NX, Seccomp) | High | detect | T1055 |\n| Cleartext protocol services (Telnet, FTP, rsh) | High | detect | T1040 |\n| SELinux \u002F AppArmor disabled or permissive | High | detect | T1068 |\n| Password policy below CIS minimum | Medium | detect | T1110 |\n| Unpatched local privilege escalation CVE | Critical | respond | T1068 |\n| Cron jobs writable by non-root | High | detect | T1053.003 |\n\n---\n\n## Reasoning Procedure\n\n1. Parse input — identify OS type, assessment scope, attached scan output (Lynis, OpenSCAP, CIS-CAT)\n2. Baseline selection — map to CIS Benchmark version and profile (L1\u002FL2) based on system role\n3. Finding classification — score against table; assign severity and MITRE mapping\n4. Prioritization — order by exploitability × impact, ease of remediation, framework requirement\n5. Remediation generation — produce exact CLI commands or GPO paths; flag mutating actions\n6. Cascade routing — add vulnerability-management if CVEs; add detection-engineering if audit gaps\n7. Output — emit USAP output contract JSON\n\n---\n\n## Intent Classification\n\n- `detect` — configuration gap found, no active exploitation\n- `respond` — active exploit or malicious config change detected\n- `analyze` — ambiguous finding requiring further investigation\n- `advise` — general hardening recommendation, no immediate risk\n- `escalate` — critical finding requiring immediate human review\n\n---\n\n## Output Contract\n\n```json\n{\n  \"agent_slug\": \"os-hardening\",\n  \"intent_type\": \"detect\",\n  \"action\": \"Remediate 3 critical CIS Level 1 failures: disable Telnet, enforce SSH key-only auth, enable auditd\",\n  \"rationale\": \"Ubuntu 22.04 failed 3 critical CIS Level 1 controls.\",\n  \"confidence\": 0.95,\n  \"severity\": \"critical\",\n  \"key_findings\": [\"Telnet active (CIS 2.1.1)\", \"SSH PermitRootLogin yes (CIS 5.2.7)\", \"auditd not running (CIS 4.1.1)\"],\n  \"evidence_references\": [],\n  \"next_agents\": [\"vulnerability-management\", \"detection-engineering\"],\n  \"human_approval_required\": false,\n  \"timestamp_utc\": \"2026-05-20T10:00:00Z\"\n}\n```\n\n*Runtime contract: `..\u002F..\u002Fagents\u002Fos-hardening.yaml`*\n",{"name":5,"context":49,"license":15,"metadata":50,"description":7,"mitre_attack":59,"allowed-tools":68,"user-invocable":69,"disallowed-tools":70,"disable-model-invocation":69},"fork",{"level":51,"phase":52,"plane":38,"author":53,"updated":54,"version":55,"category":56,"providers":57,"agent_slug":5,"usap_level":51,"can_execute":45,"approval_required":45,"required_invoke_role":58},"L4","detect","USAP Team",1788566400000,"1.0.0","usap-system-security",[43,41,35],"security-engineer",[60,61,62,63,64,65,66,67],"T1021.004","T1040","T1053.003","T1055","T1068","T1110","T1203","T1222","Read Grep Glob Bash(git diff:*)",true,"Bash(rm:*) Bash(sudo:*) Bash(mv:*)","main","1e0c636ac5c20334bfdb2cb648fe764afb2f7fdb","system-security\u002Fos-hardening",4,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills","https:\u002F\u002Fusap-security.vercel.app","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal","https:\u002F\u002Fjaskarnsingh.vercel.app","Cloud Security & DevSecOps Engineer · AI\u002FAgentic Security (USAP). CI\u002FCD security, container hardening, TLS automation. Open to Cloud & AI Security roles.","2026-10-13 02:07:38",{"source":8,"skillName":5,"commands":82,"prompt":92,"zipAvailable":69},[83,86,89],{"tool":84,"command":85},"npx","npx skills add jaskaranhundal\u002Fusap-skills --skill os-hardening",{"tool":87,"command":88},"bunx","bunx skills add jaskaranhundal\u002Fusap-skills --skill os-hardening",{"tool":90,"command":91},"pnpm","pnpm dlx skills add jaskaranhundal\u002Fusap-skills --skill os-hardening","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002FSKILL.md",[94,100,106,110,114],{"path":95,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":98,"sourceHtmlUrl":99},"assets\u002Ftemplates\u002Foutput-template.json","ASSET","资产文件",279,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002Fassets\u002Ftemplates\u002Foutput-template.json",{"path":101,"resourceType":102,"resourceTypeDesc":103,"sizeBytes":104,"sourceHtmlUrl":105},"expected_outputs\u002Fsample_output.json","REFERENCE","参考文档",3057,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002Fexpected_outputs\u002Fsample_output.json",{"path":107,"resourceType":102,"resourceTypeDesc":103,"sizeBytes":108,"sourceHtmlUrl":109},"README.md",2854,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002FREADME.md",{"path":111,"resourceType":102,"resourceTypeDesc":103,"sizeBytes":112,"sourceHtmlUrl":113},"references\u002Fworkflow.md",281,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002Freferences\u002Fworkflow.md",{"path":115,"resourceType":116,"resourceTypeDesc":117,"sizeBytes":118,"sourceHtmlUrl":119},"scripts\u002Fos-hardening_tool.py","SCRIPT","脚本",6649,"https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fsystem-security\u002Fos-hardening\u002Fscripts\u002Fos-hardening_tool.py",[121,142,159,185,202,217],{"skillNo":122,"name":123,"nameZh":6,"description":124,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":125,"categories":126,"keywords":128,"publishedAt":44},"01M6D8655FBM11DWSGG9462KQH","webapp-risk-triage","USAP agent skill for Webapp Risk Triage. Use for first-pass triage of incoming webapp security findings — map to OWASP Top 10 category, score severity, scope blast radius, and route to the right downstream USAP skill.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fwebapp-security\u002Fwebapp-risk-triage\u002FSKILL.md",[127],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[129,130,131,132,33,133,134,29,34,135,136,36,37,42,137,138,139,140,141],"triage","webapp risk triage","risk","webapp","route","map","owasp","grep","radius","first","owasp top 10","blast radius","severity",{"skillNo":143,"name":144,"nameZh":6,"description":145,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":146,"categories":147,"keywords":149,"publishedAt":44},"01M6D861X47T986D7P6445FS0T","owasp-top10-classifier","USAP agent skill for OWASP Top 10 2025 classification. Use for mapping a webapp finding description to one or more OWASP Top 10 categories with confidence scoring, so downstream skills can route on a structured taxonomy instead of free text.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fwebapp-security\u002Fowasp-top10-classifier\u002FSKILL.md",[148],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[150,151,135,152,153,132,33,154,37,155,156,139,133,157,29,158],"owasp top10 classifier","classifier","taxonomy","confidence scoring","text","scoring","classification","structured","free",{"skillNo":160,"name":161,"nameZh":6,"description":162,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":163,"categories":164,"keywords":174,"publishedAt":44},"01M6D85XWZRS2J2NR5SZQQHP9B","api-security-posture","USAP agent skill for API Security Posture. Use for scoring an API surface against OWASP API Security Top 10 — broken object level authorization, broken authentication, mass assignment, rate-limit gaps — and recommending the next USAP skill to address the largest posture drag.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Fwebapp-security\u002Fapi-security-posture\u002FSKILL.md",[165,168,169],{"categoryNo":166,"categoryName":167,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":170,"categoryName":171,"taxonomyType":172,"taxonomyTypeDesc":173},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[42,175,176,177,178,34,179,180,155,132,33,181,136,36,37,29,182,135,183,184],"api","api security","security posture","api security posture","broken authentication","next","broken","t1078","api-security","authentication",{"skillNo":186,"name":187,"nameZh":6,"description":188,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":189,"categories":190,"keywords":192,"publishedAt":44},"01M6D85PH56N2AN08ATQC2CN8Q","risk-threat-modeling","USAP agent skill for Risk & Threat Modeling. Model attacker paths using STRIDE, PASTA, and attack trees. Quantify risk impact and prioritize mitigations.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Frisk-compliance\u002Frisk-threat-modeling\u002FSKILL.md",[191],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[193,131,194,195,196,197,198,199,29,200,201,37],"threat modeling","threat","modeling","risk threat modeling","threat-modeling","governance","stride","model","prioritize",{"skillNo":203,"name":204,"nameZh":6,"description":205,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":206,"categories":207,"keywords":209,"publishedAt":44},"01M6D85K9GRS1Y74W62W34XCBP","regulatory-horizon","USAP agent skill for Regulatory Horizon. Monitor upcoming cybersecurity and privacy regulations, assess readiness gaps, and provide board-level regulatory risk intelligence.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Frisk-compliance\u002Fregulatory-horizon\u002FSKILL.md",[208],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[210,211,212,29,213,214,37,131,215,216],"regulatory horizon","regulatory","monitor","intelligence","board","privacy","cybersecurity",{"skillNo":218,"name":219,"nameZh":6,"description":220,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":221,"categories":222,"keywords":224,"publishedAt":44},"01M6D85FZJDT267K3RFN06CJK3","quantum-security-readiness","USAP agent skill for Quantum Security Readiness. Use for Track post-quantum migration readiness and crypto agility.","https:\u002F\u002Fgithub.com\u002Fjaskaranhundal\u002Fusap-skills\u002Fblob\u002Fmain\u002Frisk-compliance\u002Fquantum-security-readiness\u002FSKILL.md",[223],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[42,225,226,29,227,228,33,37,229,198],"quantum","quantum security readiness","crypto","migration","post-quantum"]