[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:stats":3,"skills:sce6":8,"skills:pro6":55,"skills:creators9":100,"skills:all:stars:120:":196},{"skillCount":4,"professionCount":5,"scenarioCount":6,"creatorCount":7},196836,11,7,1925,[9,20,27,34,41,48],{"categoryNo":10,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":13,"categoryNameEn":14,"description":15,"level":16,"skillCount":17,"parentNo":18,"parentName":18,"children":19},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",1,39452,null,[],{"categoryNo":21,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":22,"categoryNameEn":23,"description":24,"level":16,"skillCount":25,"parentNo":18,"parentName":18,"children":26},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26531,[],{"categoryNo":28,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":29,"categoryNameEn":30,"description":31,"level":16,"skillCount":32,"parentNo":18,"parentName":18,"children":33},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13568,[],{"categoryNo":35,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":36,"categoryNameEn":37,"description":38,"level":16,"skillCount":39,"parentNo":18,"parentName":18,"children":40},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6286,[],{"categoryNo":42,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":43,"categoryNameEn":44,"description":45,"level":16,"skillCount":46,"parentNo":18,"parentName":18,"children":47},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":49,"taxonomyType":11,"taxonomyTypeDesc":12,"categoryName":50,"categoryNameEn":51,"description":52,"level":16,"skillCount":53,"parentNo":18,"parentName":18,"children":54},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],[56,65,72,79,86,93],{"categoryNo":57,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":60,"categoryNameEn":61,"description":62,"level":16,"skillCount":63,"parentNo":18,"parentName":18,"children":64},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",13273,[],{"categoryNo":66,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":67,"categoryNameEn":68,"description":69,"level":16,"skillCount":70,"parentNo":18,"parentName":18,"children":71},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7774,[],{"categoryNo":73,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":74,"categoryNameEn":75,"description":76,"level":16,"skillCount":77,"parentNo":18,"parentName":18,"children":78},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":80,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":81,"categoryNameEn":82,"description":83,"level":16,"skillCount":84,"parentNo":18,"parentName":18,"children":85},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":87,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":88,"categoryNameEn":89,"description":90,"level":16,"skillCount":91,"parentNo":18,"parentName":18,"children":92},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":94,"taxonomyType":58,"taxonomyTypeDesc":59,"categoryName":95,"categoryNameEn":96,"description":97,"level":16,"skillCount":98,"parentNo":18,"parentName":18,"children":99},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],{"records":101,"total":194,"current":16,"size":195},[102,114,123,133,143,153,163,172,182],{"accountNo":103,"login":104,"displayName":105,"avatarUrl":106,"accountType":107,"accountTypeDesc":108,"profileDescription":109,"skillCount":110,"repoCount":111,"professionCount":5,"scenarioCount":6,"totalStars":112,"updatedAt":113},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,829289,"2026-11-14 03:09:22",{"accountNo":115,"login":116,"displayName":116,"avatarUrl":117,"accountType":107,"accountTypeDesc":108,"profileDescription":118,"skillCount":119,"repoCount":120,"professionCount":6,"scenarioCount":6,"totalStars":121,"updatedAt":122},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437710,"2026-11-14 03:02:00",{"accountNo":124,"login":125,"displayName":126,"avatarUrl":127,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":128,"repoCount":129,"professionCount":6,"scenarioCount":130,"totalStars":131,"updatedAt":132},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,343687,"2026-11-14 03:12:46",{"accountNo":134,"login":135,"displayName":136,"avatarUrl":137,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":138,"repoCount":139,"professionCount":140,"scenarioCount":6,"totalStars":141,"updatedAt":142},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",419,75,8,298187,"2026-11-14 03:13:01",{"accountNo":144,"login":145,"displayName":146,"avatarUrl":147,"accountType":107,"accountTypeDesc":108,"profileDescription":148,"skillCount":149,"repoCount":150,"professionCount":5,"scenarioCount":6,"totalStars":151,"updatedAt":152},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",528,48,242984,"2026-11-14 03:03:50",{"accountNo":154,"login":155,"displayName":156,"avatarUrl":157,"accountType":107,"accountTypeDesc":108,"profileDescription":158,"skillCount":159,"repoCount":160,"professionCount":5,"scenarioCount":6,"totalStars":161,"updatedAt":162},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",940,28,238680,"2026-11-14 03:13:39",{"accountNo":164,"login":165,"displayName":166,"avatarUrl":167,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":168,"repoCount":169,"professionCount":5,"scenarioCount":6,"totalStars":170,"updatedAt":171},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231826,"2026-11-13 04:18:26",{"accountNo":173,"login":174,"displayName":175,"avatarUrl":176,"accountType":107,"accountTypeDesc":108,"profileDescription":18,"skillCount":177,"repoCount":178,"professionCount":179,"scenarioCount":6,"totalStars":180,"updatedAt":181},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188019,"2026-11-14 03:13:09",{"accountNo":183,"login":184,"displayName":185,"avatarUrl":186,"accountType":187,"accountTypeDesc":188,"profileDescription":189,"skillCount":190,"repoCount":191,"professionCount":130,"scenarioCount":6,"totalStars":192,"updatedAt":193},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174614,"2026-11-13 04:05:07",1926,9,{"records":197,"total":4,"current":584,"size":585},[198,232,255,278,305,323,354,372,396,411,434,456,472,494,508,533,552,567],{"skillNo":199,"name":200,"nameZh":18,"description":201,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":210,"categories":211,"keywords":215,"publishedAt":231},"01M6AE3DDFEN33QYW0N0NTEYVM","conducting-memory-forensics-with-volatility","Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, process analysis, DLL inspection, and malware detection. Activates for requests involving memory forensics, RAM analysis, Volatility framework, memory dump investigation, volatile evidence analysis, or live memory acquisition.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",36078,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-memory-forensics-with-volatility\u002FSKILL.md",[212],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},"01JBSEEDCAT000000000000023","Skill与智能体开发",[216,217,218,219,220,221,222,223,224,225,226,227,228,229,230],"memory","forensics","Volatility","conducting memory forensics with volatility","cybersecurity","incident response","framework","malware","memory-forensics","dfir","incident-response","RAM-analysis","network","T1059.001","process-injection","2026-11-10 10:12:30",{"skillNo":233,"name":234,"nameZh":18,"description":235,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":236,"categories":237,"keywords":242,"publishedAt":231},"01M6AE3A31T60RE874D4V6ZWWM","conducting-man-in-the-middle-attack-simulation","Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap in authorized environments to intercept, analyze, and modify network traffic for testing encryption enforcement, certificate validation, and detection capabilities.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-man-in-the-middle-attack-simulation\u002FSKILL.md",[238,241],{"categoryNo":239,"categoryName":240,"taxonomyType":11,"taxonomyTypeDesc":12},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[243,244,245,220,246,247,248,228,249,250,251,252,253,254],"conducting man in the middle attack simulation","testing","security","pr","validation","capabilities","network-security","encryption","mitm","bettercap","ettercap","mitmproxy",{"skillNo":256,"name":257,"nameZh":18,"description":258,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":259,"categories":260,"keywords":262,"publishedAt":231},"01M6AE36S8ZM4Z1D0NSVNG9FXN","conducting-malware-incident-response","Respond to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing containment, analysis, eradication, and recovery procedures aligned to MITRE ATT&CK. Use when responding to a confirmed or suspected malware infection, including trojan\u002Fworm\u002Fransomware outbreaks, malware triage, or infected endpoint remediation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-malware-incident-response\u002FSKILL.md",[261],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[221,223,263,220,264,247,265,266,267,268,269,270,271,226,272,273,274,275,276,277],"conducting malware incident response","triage","protocol","content","metadata","file","malware-analysis","MITRE-ATT&CK","Enterprise","ransomware","malware-response","containment","remediation","eradication","endpoint-remediation",{"skillNo":279,"name":280,"nameZh":18,"description":281,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":282,"categories":283,"keywords":285,"publishedAt":231},"01M6AE335P4ENK3SR1KJ4FKDDG","conducting-internal-reconnaissance-with-bloodhound-ce","Conduct internal Active Directory reconnaissance using BloodHound Community Edition's graph database with the SharpHound (AD) and AzureHound (Entra ID) collectors, mapping ACLs, sessions, and group memberships into attack paths from a low-privileged foothold to Domain Admin. Use after an initial AD foothold to identify privilege escalation chains, or to validate that AD hardening closed known attack paths.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-internal-reconnaissance-with-bloodhound-ce\u002FSKILL.md",[284],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[286,287,288,289,220,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304],"reconnaissance","conducting internal reconnaissance with bloodhound ce","directory","policy","sessions","validate","entra id","authentication","database","admin","graph","red-team","active-directory","privilege-escalation","attack-paths","hardening","escalation","bloodhound","graph-analysis",{"skillNo":306,"name":307,"nameZh":18,"description":308,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":309,"categories":310,"keywords":312,"publishedAt":231},"01M6AE2ZA84XJ25N9S2ENQJYMR","conducting-internal-network-penetration-test","Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral movement paths, privilege escalation vectors, and sensitive data exposure within the corporate network.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-internal-network-penetration-test\u002FSKILL.md",[311],{"categoryNo":239,"categoryName":240,"taxonomyType":11,"taxonomyTypeDesc":12},[313,228,314,244,245,220,265,315,299,316,317,249,302,318,319,320,321,322],"test","conducting internal network penetration test","server","penetration-testing","data","internal-pentest","lateral-movement","Responder","Impacket","assumed-breach",{"skillNo":324,"name":325,"nameZh":18,"description":326,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":327,"categories":328,"keywords":336,"publishedAt":231},"01M6AE2TN47YK3QAP4W13FHHHN","conducting-gdpr-compliance-assessment","Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016\u002F679, including Article 30 records of processing, lawful basis validation, data subject rights implementation, Data Protection Impact Assessments (DPIAs) under Article 35, breach notification procedures, international transfer safeguards (SCCs, adequacy decisions), and technical\u002Forganizational measures under Article 32. Use when processing personal data of EU residents, preparing for supervisory authority audits, implementing privacy-by-design for new systems, scoping compliance gaps for M&A due diligence, assessing third-party processors, or responding to data subject access requests at scale. Incorporates 2026 guidance from ICO, EDPB, and post-Data (Use and Access) Act 2025 UK-GDPR considerations. Do not use for implementing specific Article 32 controls — use implementing-gdpr-data-protection-controls; or for DSAR automation — use implementing-gdpr-data-subject-access-request.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-gdpr-compliance-assessment\u002FSKILL.md",[329,332,333,334,335],{"categoryNo":330,"categoryName":331,"taxonomyType":11,"taxonomyTypeDesc":12},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":73,"categoryName":74,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":80,"categoryName":81,"taxonomyType":58,"taxonomyTypeDesc":59},{"categoryNo":94,"categoryName":95,"taxonomyType":58,"taxonomyTypeDesc":59},[337,338,339,340,341,342,220,343,344,246,345,317,346,347,348,349,350,351,352,353],"assessment","compliance","gdpr","conducting gdpr compliance assessment","design","personal","automation","governance","data protection","dpia","data-subject-rights","article-30","controller","processor","eu-regulation","ico","supervisory-authority",{"skillNo":355,"name":356,"nameZh":18,"description":357,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":358,"categories":359,"keywords":361,"publishedAt":231},"01M6AE2PRTFMG76QKJ7YHXZ7YQ","conducting-full-scope-red-team-engagement","Plan and execute a comprehensive, MITRE ATT&CK-aligned red team engagement spanning threat modeling, reconnaissance, initial access, and post-exploitation to evaluate an organization's detection, prevention, and response against APT-style behavior. Use when scoping or running a full-scope, objective-based engagement, or purple-teaming against a specific threat actor's TTPs.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-full-scope-red-team-engagement\u002FSKILL.md",[360],{"categoryNo":239,"categoryName":240,"taxonomyType":11,"taxonomyTypeDesc":12},[362,363,244,245,364,220,247,265,268,365,297,366,367,316,229,368,369,286,370,371],"red team","conducting full scope red team engagement","threat modeling","apt","post-exploitation","mitre-attack","ttp-mapping","adversary-emulation","offensive-security","purple-team",{"skillNo":373,"name":374,"nameZh":18,"description":375,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":376,"categories":377,"keywords":384,"publishedAt":231},"01M6AE2K3GZHVY5YRBBWE599Z4","conducting-external-reconnaissance-with-osint","Conduct external recon using OSINT techniques to map an organization's external attack surface without touching target systems, gathering DNS records, certificate transparency logs, search results, social media, code repositories, and breach databases into a target profile. Use for the passive info-gathering phase of a pentest, external footprinting, or collecting employee\u002Femail intel for a social engineering campaign.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-external-reconnaissance-with-osint\u002FSKILL.md",[378,379,382,383],{"categoryNo":239,"categoryName":240,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":380,"categoryName":381,"taxonomyType":11,"taxonomyTypeDesc":12},"01JBSEEDCAT000000000000019","营销推广",{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":87,"categoryName":88,"taxonomyType":58,"taxonomyTypeDesc":59},[385,286,386,244,220,387,388,389,390,391,392,316,393,394,395],"osint","conducting external reconnaissance with osint","code","search","logs","email","engineering","dns","attack-surface","footprinting","passive-recon",{"skillNo":397,"name":398,"nameZh":18,"description":399,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":400,"categories":401,"keywords":403,"publishedAt":231},"01M6AE2FKZ5060JQK0PN1VHJF1","conducting-domain-persistence-with-dcsync","Perform DCSync attacks by abusing MS-DRSR replication rights (DS-Replication-Get-Changes\u002F-All) to impersonate a Domain Controller and extract KRBTGT, Domain Admin, and service account hashes for Golden Ticket forging, typically with Mimikatz. Use in authorized engagements after finding principals with replication rights, to establish long-term domain persistence, or to validate detections for replication abuse.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-domain-persistence-with-dcsync\u002FSKILL.md",[402],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[404,405,288,220,291,265,295,406,315,297,298,407,228,408,409,410],"persistence","conducting domain persistence with dcsync","monitoring","mimikatz","dcsync","credential-dumping","golden-ticket",{"skillNo":412,"name":413,"nameZh":18,"description":414,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":415,"categories":416,"keywords":417,"publishedAt":231},"01M6AE2C05T1KQHQH25P34KAT3","conducting-cyber-risk-assessment-with-nist-800-30","Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and predisposing conditions, determine likelihood and impact, compute risk, and communicate results as a prioritized risk register. Use when an organization needs an actual risk *assessment* (not a maturity score), when a control framework (CSF, ISO 27001, RMF, SOC 2, PCI) requires a documented risk analysis as input, when leadership asks \"what are our top risks and how bad are they\", when assessing risk for a new system or major change, or when building a risk register from scratch. This is the methodology that feeds framework selection, ATO packages, and treatment decisions. Keywords: risk assessment, NIST 800-30, threat modeling, likelihood and impact, risk register, risk analysis, threat sources, vulnerabilities, risk determination, qualitative risk, risk matrix, residual risk, risk treatment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-cyber-risk-assessment-with-nist-800-30\u002FSKILL.md",[],[418,337,419,420,220,421,422,423,344,424,425,426,338,427,428,429,430,431,432,433],"risk assessment","NIST","conducting cyber risk assessment with nist 800 30","vulnerabilities","change","prepare","risk analysis","risk register","packages","soc","methodology","feeds","risk-management","threat-modeling","risk-register","nist-800-39",{"skillNo":435,"name":436,"nameZh":18,"description":437,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":438,"categories":439,"keywords":442,"publishedAt":231},"01M6AE28F632ZG7NR0TG0G6PKF","conducting-cloud-penetration-testing","This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCP cloud environments. It covers understanding the shared responsibility model for testing scope, leveraging cloud-specific attack tools like Pacu and ScoutSuite, exploiting IAM misconfigurations, testing for SSRF to cloud metadata services, and reporting findings aligned to MITRE ATT&CK Cloud matrix.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-cloud-penetration-testing\u002FSKILL.md",[440,441],{"categoryNo":239,"categoryName":240,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[244,443,444,445,245,220,446,246,265,447,448,367,449,228,450,451,452,453,454,455],"cloud","penetration testing","conducting cloud penetration testing","azure","reporting","services","cloud-security","aws","gcp","iam","ssrf","Outlines","cloud-pentesting",{"skillNo":457,"name":458,"nameZh":18,"description":459,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":460,"categories":461,"keywords":463,"publishedAt":231},"01M6AE25579RZC34BBEVD5A5BX","conducting-cloud-incident-response","Respond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit Logs), resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure. Use when CSPM alerts or audit logs show compromised cloud credentials, unauthorized IAM changes, or a breach spanning cloud services.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-cloud-incident-response\u002FSKILL.md",[462],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[221,443,464,220,446,465,389,448,217,466,226,450,451,452,274,467,468,469,470,471],"conducting cloud incident response","audit","cloudtrail","cloud-IR","AWS-forensics","Azure-incident-response","GCP-security","identity-containment",{"skillNo":473,"name":474,"nameZh":18,"description":475,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":476,"categories":477,"keywords":484,"publishedAt":231},"01M6AE21KRVQ6XBNCCDFQ033NX","conducting-api-security-testing","Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The tester uses the OWASP API Security Top 10 as the testing framework, combining Burp Suite interception with Postman collections and custom scripts to test endpoint security at every privilege level. Activates for requests involving API security testing, REST API pentest, GraphQL security assessment, or API vulnerability testing.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fconducting-api-security-testing\u002FSKILL.md",[478,479,482,483],{"categoryNo":239,"categoryName":240,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":480,"categoryName":481,"taxonomyType":11,"taxonomyTypeDesc":12},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":57,"categoryName":60,"taxonomyType":58,"taxonomyTypeDesc":59},[244,245,485,220,421,313,337,293,247,222,486,487,488,316,489,490,491,492,493],"conducting api security testing","testing framework","grpc","api-security","owasp","OWASP-API-Top10","REST","GraphQL","authorization-testing",{"skillNo":495,"name":496,"nameZh":18,"description":497,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":498,"categories":499,"keywords":501,"publishedAt":231},"01M6AE1Y0CYAF8SVK3E800E34M","collecting-volatile-evidence-from-compromised-host","Collect volatile forensic evidence from a compromised host by following the order of volatility, preserving memory, network connections, running processes, and system state with documented chain of custody before they are lost. Use before isolating, shutting down, or remediating a compromised host, especially when fileless or memory-resident malware is suspected, root cause analysis is needed, or the evidence must hold up in legal proceedings.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fcollecting-volatile-evidence-from-compromised-host\u002FSKILL.md",[500],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[502,216,220,503,504,505,217,223,224,225,226,218,228,229,506,507],"collecting volatile evidence from compromised host","root cause analysis","state","collect","volatile-evidence","chain-of-custody",{"skillNo":509,"name":510,"nameZh":18,"description":511,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":512,"categories":513,"keywords":520,"publishedAt":231},"01M6AE1TQ62K6GC5ADD71PCJ9V","collecting-threat-intelligence-with-misp","Deploy MISP, configure threat feeds (MISP community, freetext, TAXII, CSV), and use the PyMISP API to programmatically fetch, add, and search events and IOCs, building automated collection pipelines that aggregate indicators from community and commercial sources. Use when gathering, storing, or correlating IOCs and threat intelligence, or when scripting MISP ingestion via PyMISP.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fcollecting-threat-intelligence-with-misp\u002FSKILL.md",[514,515,518,519],{"categoryNo":480,"categoryName":481,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":516,"categoryName":517,"taxonomyType":11,"taxonomyTypeDesc":12},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},{"categoryNo":57,"categoryName":60,"taxonomyType":58,"taxonomyTypeDesc":59},[521,522,523,220,524,388,525,367,526,527,528,529,530,531,532,429],"threat intelligence","MISP","collecting threat intelligence with misp","deploy","csv","threat-intelligence","cti","ioc","stix","TAXII","threat-sharing","sharing",{"skillNo":534,"name":535,"nameZh":18,"description":536,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":537,"categories":538,"keywords":540,"publishedAt":231},"01M6AE1QHSKPRGFNWAHPP7FZRP","collecting-open-source-intelligence","Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and attack campaigns using publicly available data sources, passive reconnaissance tools, and dark web monitoring. Use when investigating external threat actor infrastructure, performing pre-engagement reconnaissance for authorized red team assessments, or enriching CTI reports with publicly available adversary context. Activates for requests involving Maltego, Shodan, OSINT framework, SpiderFoot, or infrastructure reconnaissance.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fcollecting-open-source-intelligence\u002FSKILL.md",[539],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[541,542,543,220,544,545,406,385,362,526,527,546,317,419,547,548,286,549,550,551],"open source","collecting open source intelligence","malicious","web","infrastructure","NIST-CSF","maltego","spiderfoot","Shodan","Recon-ng","ATT&CK-T1591",{"skillNo":553,"name":554,"nameZh":18,"description":555,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":556,"categories":557,"keywords":559,"publishedAt":231},"01M6AE1M6B12VDGHDDKE1MWJK9","collecting-indicators-of-compromise","Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security incidents to enable detection, blocking, and threat intelligence sharing. Covers network, host, email, and behavioral indicators using STIX\u002FTAXII formats and threat intelligence platforms. Activates for requests involving IOC collection, indicator extraction, threat indicator sharing, compromise indicators, STIX export, or IOC enrichment.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fcollecting-indicators-of-compromise\u002FSKILL.md",[558],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[560,245,220,521,390,526,528,529,522,226,228,229,530,561,562,532,563,564,565,566],"collecting indicators of compromise","enrichment","indicator","IOC-collection","threat-indicators","STIX-TAXII","threat-intelligence-sharing",{"skillNo":568,"name":569,"nameZh":18,"description":570,"descriptionZh":18,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":18,"sourceHtmlUrl":571,"categories":572,"keywords":574,"publishedAt":231},"01M6AE1GJFDTH8GR24GMD9C6GA","coercing-authentication-with-coercer-petitpotam","Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer (MS-RPRN, MS-DFSNM, MS-FSRVP, MS-EVEN) via Coercer's scan\u002Fcoerce\u002Ffuzz modes, feeding the coerced NTLM auth into a relay against AD CS Web Enrollment (ESC8), LDAP (RBCD), or SMB. Use in authorized engagements to complete a coercion-relay chain against a Domain Controller, or to validate coercion detections and signing\u002FEPA mitigations.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fcoercing-authentication-with-coercer-petitpotam\u002FSKILL.md",[573],{"categoryNo":213,"categoryName":214,"taxonomyType":11,"taxonomyTypeDesc":12},[293,575,288,220,544,576,291,297,298,577,578,579,580,581,582,583],"coercing authentication with coercer petitpotam","auth","ldap","coercion","petitpotam","coercer","ntlm-relay","esc8","forced-authentication",120,18]