[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:stats":3,"skills:pro6":8,"skills:sce6":55,"skills:creators9":100,"skills:all:stars:117:":195},{"skillCount":4,"professionCount":5,"scenarioCount":6,"creatorCount":7},196837,11,7,1926,[9,20,27,34,41,48],{"categoryNo":10,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":13,"categoryNameEn":14,"description":15,"level":16,"skillCount":17,"parentNo":18,"parentName":18,"children":19},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13273,null,[],{"categoryNo":21,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":22,"categoryNameEn":23,"description":24,"level":16,"skillCount":25,"parentNo":18,"parentName":18,"children":26},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7774,[],{"categoryNo":28,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":29,"categoryNameEn":30,"description":31,"level":16,"skillCount":32,"parentNo":18,"parentName":18,"children":33},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":35,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":36,"categoryNameEn":37,"description":38,"level":16,"skillCount":39,"parentNo":18,"parentName":18,"children":40},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":42,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":43,"categoryNameEn":44,"description":45,"level":16,"skillCount":46,"parentNo":18,"parentName":18,"children":47},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":49,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":50,"categoryNameEn":51,"description":52,"level":16,"skillCount":53,"parentNo":18,"parentName":18,"children":54},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[56,65,72,79,86,93],{"categoryNo":57,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":60,"categoryNameEn":61,"description":62,"level":16,"skillCount":63,"parentNo":18,"parentName":18,"children":64},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39455,[],{"categoryNo":66,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":67,"categoryNameEn":68,"description":69,"level":16,"skillCount":70,"parentNo":18,"parentName":18,"children":71},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26531,[],{"categoryNo":73,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":74,"categoryNameEn":75,"description":76,"level":16,"skillCount":77,"parentNo":18,"parentName":18,"children":78},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13568,[],{"categoryNo":80,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":81,"categoryNameEn":82,"description":83,"level":16,"skillCount":84,"parentNo":18,"parentName":18,"children":85},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":87,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":88,"categoryNameEn":89,"description":90,"level":16,"skillCount":91,"parentNo":18,"parentName":18,"children":92},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":94,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":95,"categoryNameEn":96,"description":97,"level":16,"skillCount":98,"parentNo":18,"parentName":18,"children":99},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":101,"total":7,"current":16,"size":194},[102,114,123,133,143,153,163,172,182],{"accountNo":103,"login":104,"displayName":105,"avatarUrl":106,"accountType":107,"accountTypeDesc":108,"profileDescription":109,"skillCount":110,"repoCount":111,"professionCount":5,"scenarioCount":6,"totalStars":112,"updatedAt":113},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,829284,"2026-11-14 03:09:22",{"accountNo":115,"login":116,"displayName":116,"avatarUrl":117,"accountType":107,"accountTypeDesc":108,"profileDescription":118,"skillCount":119,"repoCount":120,"professionCount":6,"scenarioCount":6,"totalStars":121,"updatedAt":122},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437710,"2026-11-14 03:02:00",{"accountNo":124,"login":125,"displayName":126,"avatarUrl":127,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":128,"repoCount":129,"professionCount":6,"scenarioCount":130,"totalStars":131,"updatedAt":132},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":134,"login":135,"displayName":136,"avatarUrl":137,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":138,"repoCount":139,"professionCount":140,"scenarioCount":6,"totalStars":141,"updatedAt":142},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":144,"login":145,"displayName":146,"avatarUrl":147,"accountType":107,"accountTypeDesc":108,"profileDescription":148,"skillCount":149,"repoCount":150,"professionCount":5,"scenarioCount":6,"totalStars":151,"updatedAt":152},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",528,48,242984,"2026-11-14 03:03:50",{"accountNo":154,"login":155,"displayName":156,"avatarUrl":157,"accountType":107,"accountTypeDesc":108,"profileDescription":158,"skillCount":159,"repoCount":160,"professionCount":5,"scenarioCount":6,"totalStars":161,"updatedAt":162},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",940,28,238441,"2026-11-13 03:57:35",{"accountNo":164,"login":165,"displayName":166,"avatarUrl":167,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":168,"repoCount":169,"professionCount":5,"scenarioCount":6,"totalStars":170,"updatedAt":171},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231826,"2026-11-13 04:18:26",{"accountNo":173,"login":174,"displayName":175,"avatarUrl":176,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":177,"repoCount":178,"professionCount":179,"scenarioCount":6,"totalStars":180,"updatedAt":181},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":183,"login":184,"displayName":185,"avatarUrl":186,"accountType":187,"accountTypeDesc":188,"profileDescription":189,"skillCount":190,"repoCount":191,"professionCount":130,"scenarioCount":6,"totalStars":192,"updatedAt":193},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174614,"2026-11-13 04:05:07",9,{"records":196,"total":4,"current":566,"size":567},[197,233,258,276,295,319,343,353,375,402,424,443,468,486,504,524,538,552],{"skillNo":198,"name":199,"nameZh":18,"description":200,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":209,"categories":210,"keywords":215,"publishedAt":232},"01M6AE9DMD9QZRRMVTQSHH11HT","detecting-aws-cloudtrail-anomalies","Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized resource access.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",36078,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-aws-cloudtrail-anomalies\u002FSKILL.md",[211,214],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":10,"categoryName":13,"taxonomyType":11,"taxonomyTypeDesc":12},[216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231],"cloudtrail","aws","detecting aws cloudtrail anomalies","security","cybersecurity","pr","development","logs","cloud","cloud-security","threat-detection","escalation","detection","defense","anomaly-detection","boto3","2026-11-10 10:12:30",{"skillNo":234,"name":235,"nameZh":18,"description":236,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":237,"categories":238,"keywords":243,"publishedAt":232},"01M6AE9AKSG1ESHSK74KJED8QX","detecting-attacks-on-scada-systems","This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-attacks-on-scada-systems\u002FSKILL.md",[239,242],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":28,"categoryName":29,"taxonomyType":11,"taxonomyTypeDesc":12},[244,245,219,220,246,247,221,248,249,226,250,251,228,252,253,254,255,256,257],"scada","detecting attacks on scada systems","security tools","analytics","protocol","protocols","intrusion-detection","data","ot-security","ics","industrial-control","iec62443","man-in-the-middle","historian",{"skillNo":259,"name":260,"nameZh":18,"description":261,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":262,"categories":263,"keywords":265,"publishedAt":232},"01M6AE970GESQ1A5R3H1TEHSTT","detecting-attacks-on-historian-servers","Detect cyber attacks on OT historian servers (OSIsoft PI, Ignition, GE Proficy, Wonderware InSQL) using a Python detector that flags unauthorized queries, data manipulation, and lateral-movement indicators as historians pivot between IT and OT networks. Use when monitoring historians bridging IT\u002FOT zones for compromise, investigating historian-specific CVE exploitation, or validating historian data integrity after a suspected OT incident.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-attacks-on-historian-servers\u002FSKILL.md",[264],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[266,267,219,220,221,268,269,251,270,271,252,253,257,272,273,274,275],"detecting attacks on historian servers","python","cve","monitoring","lateral-movement","exploitation","osisoft-pi","ignition","pivot-point","data-integrity",{"skillNo":277,"name":278,"nameZh":18,"description":279,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":280,"categories":281,"keywords":283,"publishedAt":232},"01M6AE937JN2Y9F54AR49AF329","detecting-arp-poisoning-in-network-traffic","Detect Layer 2 ARP poisoning\u002Fspoofing by deploying ARPWatch, Dynamic ARP Inspection (DAI), Wireshark packet analysis, and custom Python monitoring scripts that flag gratuitous ARP floods, IP-to-MAC mapping changes, and duplicate IP addresses. Use when investigating suspected man-in-the-middle interception or session hijacking on a local network segment, or when building layer-2 anomaly detection for a SOC.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-arp-poisoning-in-network-traffic\u002FSKILL.md",[282],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[284,285,267,219,220,221,269,286,287,288,289,228,290,291,292,293,256,294],"network","detecting arp poisoning in network traffic","soc","Wireshark","network-security","mitm","arp-poisoning","arp-spoofing","dynamic-arp-inspection","arpwatch","layer-2-security",{"skillNo":296,"name":297,"nameZh":18,"description":298,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":299,"categories":300,"keywords":303,"publishedAt":232},"01M6AE8ZC6GZX2KN0Y3XHTYQPK","detecting-api-enumeration-attacks","Detect API enumeration attacks (BOLA\u002FIDOR, OWASP API1:2023) by writing SIEM detection rules that flag sequential or UUID identifier iteration, parameter tampering, and mixed 200\u002F401\u002F403 response patterns from API gateway and WAF logs. Use when investigating suspected object-level authorization abuse, building threat-hunting queries for API access-control bypass, or hardening API logging\u002Frate-limiting against enumeration.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-api-enumeration-attacks\u002FSKILL.md",[301,302],{"categoryNo":212,"categoryName":213,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":10,"categoryName":13,"taxonomyType":11,"taxonomyTypeDesc":12},[304,305,219,220,306,221,307,308,309,223,310,311,312,313,314,228,315,316,317,318],"detecting api enumeration attacks","writing","siem","logging","api gateway","gateway","waf","api-security","threat-hunting","hardening","owasp","enumeration","bola","idor","broken-object-level-authorization",{"skillNo":320,"name":321,"nameZh":18,"description":322,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":323,"categories":324,"keywords":330,"publishedAt":232},"01M6AE8VHBR2P1BQFNQR4566MX","detecting-anomalous-authentication-patterns","Detects anomalous authentication patterns using UEBA analytics, statistical baselines, and machine learning models to identify impossible travel, credential stuffing, brute force, password spraying, and compromised account behaviors across authentication logs. Activates for requests involving authentication anomaly detection, login behavior analysis, UEBA implementation, or suspicious sign-in investigation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-anomalous-authentication-patterns\u002FSKILL.md",[325,328,329],{"categoryNo":326,"categoryName":327,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000013","分析与可视化",{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":28,"categoryName":29,"taxonomyType":11,"taxonomyTypeDesc":12},[331,332,333,220,334,335,336,247,221,223,228,337,338,339,340,341,342],"authentication","detecting anomalous authentication patterns","suspicious","machine learning","web","identity","UEBA","authentication-anomaly","impossible-travel","brute-force","credential-stuffing","behavioral-analytics",{"skillNo":344,"name":345,"nameZh":18,"description":346,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":347,"categories":348,"keywords":350,"publishedAt":232},"01M6AE8QCX0PK2GSTPTBZM6BDF","detecting-anomalies-in-industrial-control-systems","Deploys anomaly detection for OT\u002FICS environments using machine learning on OT network baselines, physics-based process models, and Modbus\u002FDNP3\u002FOPC UA traffic analysis to flag deviations, rogue devices, and mismatches against historian data. Use for continuous OT monitoring, baselining deterministic SCADA polling, or investigating alerts from Nozomi Guardian\u002FDragos needing deeper protocol analysis.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-anomalies-in-industrial-control-systems\u002FSKILL.md",[349],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[351,219,220,334,221,248,269,284,251,228,252,253,244,254,255,230,352],"detecting anomalies in industrial control systems","machine-learning",{"skillNo":354,"name":355,"nameZh":18,"description":356,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":357,"categories":358,"keywords":360,"publishedAt":232},"01M6AE8M9TSVAM0AKMW5FRX549","detecting-ai-model-prompt-injection-attacks","Detects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer classification, flagging direct injections (system-prompt overrides, role-play escapes) and indirect injections (encoded payloads, obfuscation) per OWASP LLM Top 10 (LLM01:2025). Use for input validation layers in chatbots\u002Fagents\u002FRAG pipelines, or for retrospectively classifying injection attempts in logs or incident investigations.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdetecting-ai-model-prompt-injection-attacks\u002FSKILL.md",[359],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[361,362,363,219,220,364,221,365,366,367,223,368,313,314,369,370,371,372,373,374],"prompt injection","detecting ai model prompt injection attacks","nlp","rag","owasp llm","validation","play","ai-security","owasp-llm-top10","prompt-injection","obfuscation","LLM-security","NLP-classification","input-validation",{"skillNo":376,"name":377,"nameZh":18,"description":378,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":379,"categories":380,"keywords":384,"publishedAt":232},"01M6AE8GF5B8SMR27S8K3TX67K","designing-adversary-engagement-with-mitre-engage","Plan, run, and measure an adversary engagement operation using the MITRE Engage framework so that deployed deception is driven by strategy instead of deployed ad hoc. Covers the Engage Matrix (Prepare, Expose, Affect, Elicit, Understand), the 10-Step Operational Process, mapping engagement Activities to the ATT&CK techniques they expose, and defining measurable Goals and Operational Objectives. Use when a team has honeypots, honeytokens, or canary tokens but no coordinating strategy, when leadership asks \"should we engage attackers and how\", when building a deception\u002Fdenial program, when writing an adversary engagement operation plan, or when deciding which deception Activities to deploy against a specific threat actor. Keywords: MITRE Engage, adversary engagement, cyber deception strategy, denial and deception, Engage Matrix, EAC, EGO, Expose Affect Elicit, deception program, honeypot strategy, engagement operation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdesigning-adversary-engagement-with-mitre-engage\u002FSKILL.md",[381],{"categoryNo":382,"categoryName":383,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000011","运维与部署",[385,305,220,386,387,388,389,390,391,392,393,394,395,228,396,397,398,399,400,401],"designing adversary engagement with mitre engage","deploy","prepare","run","framework","engineering","threat-intelligence","detection-engineering","ATT&CK","honeytokens","deception","deception-technology","mitre-engage","adversary-engagement","denial-and-deception","engage-matrix","cyber-deception",{"skillNo":403,"name":404,"nameZh":18,"description":405,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":406,"categories":407,"keywords":409,"publishedAt":232},"01M6AE8CPBHF443CDZ6P78AQ56","deploying-tailscale-for-zero-trust-vpn","Deploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit nodes, subnet routers, and MagicDNS for encrypted peer-to-peer connectivity. Use when replacing traditional VPN servers with an identity-authenticated mesh network or enforcing granular per-device access control lists.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-tailscale-for-zero-trust-vpn\u002FSKILL.md",[408],{"categoryNo":382,"categoryName":383,"taxonomyType":58,"taxonomyTypeDesc":59},[410,411,412,413,220,414,336,221,284,415,416,417,418,419,420,421,422,423],"ZeRO","deploying tailscale for zero trust vpn","mesh","mesh network","architecture","ACL","zero-trust","ztna","tailscale","wireguard","mesh-vpn","peer-to-peer","identity-aware","headscale",{"skillNo":425,"name":426,"nameZh":18,"description":427,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":428,"categories":429,"keywords":431,"publishedAt":232},"01M6AE898WAKEZCPG3N56C5FYA","deploying-software-defined-perimeter","Deploys a Software-Defined Perimeter per the CSA v2.0 specification, configuring Single Packet Authorization, mutual TLS, and SDP controller\u002Fgateway components to enforce zero trust network access. Use when building or hardening zero trust network architecture, implementing SPA-based \"invisible\" infrastructure that cloaks services from unauthenticated scanning, or meeting compliance requirements for zero trust network access.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-software-defined-perimeter\u002FSKILL.md",[430],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[432,220,433,414,221,434,309,435,436,410,284,313,437,416,417,438,439,440,441,442],"deploying software defined perimeter","components","infrastructure","services","compliance","controller","network-access","authorization","tls","sdp","software-defined-perimeter",{"skillNo":444,"name":445,"nameZh":18,"description":446,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":447,"categories":448,"keywords":453,"publishedAt":232},"01M6AE865GY8MV6ES1P72FKX1S","deploying-ransomware-canary-files","Deploys and monitors ransomware canary files using Python's watchdog library, placing decoy files mimicking high-value targets (financial records, credentials, database exports) where ransomware enumerates first, and alerting via email, Slack, or syslog on any read\u002Fmodify\u002Frename\u002Fdelete. Use for early-warning ransomware detection on file servers, NAS, or endpoints, or to supplement EDR where agents can't be deployed.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-ransomware-canary-files\u002FSKILL.md",[449,452],{"categoryNo":450,"categoryName":451,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000005","邮件与沟通",{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[454,455,456,267,220,221,457,458,459,460,461,462,463,395,228,464,465,466,467,229],"ransomware","deploying ransomware canary files","slack","delete","database","library","file","alerting","email","cryptocurrency","canary-files","edr","watchdog","early-warning",{"skillNo":469,"name":470,"nameZh":18,"description":471,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":472,"categories":473,"keywords":475,"publishedAt":232},"01M6AE831P9BFAST78Z54DAYPA","deploying-palo-alto-prisma-access-zero-trust","Deploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, ZTNA Connectors, security policy enforcement, and Strata Cloud Manager integration for unified management. Use when implementing enterprise-grade SASE with integrated ZTNA\u002FSWG\u002FCASB\u002FFWaaS, replacing both VPN and branch firewalls with cloud-delivered security, or integrating ZTNA with an existing Palo Alto NGFW estate.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-palo-alto-prisma-access-zero-trust\u002FSKILL.md",[474],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[410,476,219,477,220,414,478,221,479,224,480,284,416,417,481,482,483,484,485],"deploying palo alto prisma access zero trust","policy","connectors","integration","Enterprise","sase","prisma-access","palo-alto","globalprotect","strata-cloud-manager",{"skillNo":487,"name":488,"nameZh":18,"description":489,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":490,"categories":491,"keywords":493,"publishedAt":232},"01M6AE7Z4TQFMVA16KZGFQ8RKM","deploying-osquery-for-endpoint-monitoring","Deploys and configures osquery for real-time endpoint monitoring using SQL-based queries to inspect running processes, open ports, installed software, and system configuration. Use when building visibility into endpoint state, threat hunting across fleet, or implementing compliance monitoring. Activates for requests involving osquery deployment, endpoint visibility, fleet management, or SQL-based endpoint querying.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-osquery-for-endpoint-monitoring\u002FSKILL.md",[492],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[269,494,495,219,220,496,497,221,498,499,436,312,500,501,502,503],"endpoint","deploying osquery for endpoint monitoring","threat hunting","sql","deployment","state","endpoint-security","osquery","endpoint-monitoring","fleet-management",{"skillNo":505,"name":506,"nameZh":18,"description":507,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":508,"categories":509,"keywords":515,"publishedAt":232},"01M6AE7VJHZ04S9HR97KGMPDS1","deploying-honeytokens-and-canarytokens","Plants Canarytokens-based decoy artifacts (honey credentials, DNS tokens, web-bug URLs, AWS keys, documents, kubeconfigs) using Thinkst's open-source Canarytokens project and alerts via email or webhook when a token is touched. Use for high-fidelity intrusion detection in low-telemetry areas like file shares or credential stores, or to catch credential dumping and data-theft staging.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-honeytokens-and-canarytokens\u002FSKILL.md",[510,513,514],{"categoryNo":511,"categoryName":512,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":450,"categoryName":451,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[394,516,220,335,517,518,519,460,462,520,226,250,251,217,395,228,396,521,522,523],"deploying honeytokens and canarytokens","telemetry","documents","artifacts","dns","canarytokens","d3fend","decoy-credentials",{"skillNo":525,"name":526,"nameZh":18,"description":527,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":528,"categories":529,"keywords":531,"publishedAt":232},"01M6AE7QWM6G4QRDKXWW5ACVDH","deploying-edr-agent-with-crowdstrike","Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threat detection, behavioral analysis, and automated response. Use when onboarding endpoints to EDR coverage, configuring detection policies, or integrating Falcon telemetry with SIEM platforms. Activates for requests involving CrowdStrike deployment, Falcon sensor installation, EDR policy configuration, or endpoint detection and response.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-edr-agent-with-crowdstrike\u002FSKILL.md",[530],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[532,219,477,220,306,517,221,498,533,226,480,534,500,494,228,465,535,536,537],"deploying edr agent with crowdstrike","onboarding","T1059.001","CrowdStrike","Falcon","sensor-deployment",{"skillNo":539,"name":540,"nameZh":18,"description":541,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":542,"categories":543,"keywords":545,"publishedAt":232},"01M6AE7M2T9EY1200CQZQ1JMN3","deploying-decoy-files-for-ransomware-detection","Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time. Uses strategically placed decoy documents monitored via file integrity monitoring or OS-level watchdogs to trigger alerts when ransomware modifies or encrypts them. Activates for requests involving ransomware canary deployment, honeyfile setup, deception-based ransomware detection, or file integrity monitoring for encryption.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-decoy-files-for-ransomware-detection\u002FSKILL.md",[544],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[454,228,546,547,220,548,518,221,498,460,269,549,463,550,394,395,464,551],"deploying decoy files for ransomware detection","real time","setup","encryption","indicator","file-integrity",{"skillNo":553,"name":554,"nameZh":18,"description":555,"descriptionZh":18,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":18,"sourceHtmlUrl":556,"categories":557,"keywords":559,"publishedAt":232},"01M6AE7G8V2736QSC2AERGSG9M","deploying-cloudflare-access-for-zero-trust","Deploys Cloudflare Access with Cloudflare Tunnel for zero trust access to self-hosted apps, configuring identity-aware policies, device posture checks, and WARP client enrollment as a VPN replacement. Use when replacing VPN with Cloudflare One, exposing internal apps without open inbound ports, or securing contractor\u002Fthird-party access to specific applications.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fdeploying-cloudflare-access-for-zero-trust\u002FSKILL.md",[558],{"categoryNo":240,"categoryName":241,"taxonomyType":58,"taxonomyTypeDesc":59},[560,410,561,220,414,336,221,416,417,562,563,564,565],"cloudflare","deploying cloudflare access for zero trust","cloudflare-access","cloudflare-tunnel","warp","cloudflare-one",117,18]