Explore the full catalog
Explore skills, repositories and creators
Search the catalog or browse with filters. Checks are automated signals, not a safety guarantee.
Page 126 · 50 results shown
Skill
performing-api-security-testing-with-postman
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-api-security-testing-with-postman
Uses Postman to build structured API security test collections covering the OWASP API Security Top 10—authentication bypass, authorization flaws, injection, and data exposure—with multi-role environments, automated test scripts, and OWASP ZAP/Newman integration for CI/CD. Use when building repeatable Postman-based API security regression tests or automating OWASP API Top 10 coverage in a pipeline.
Repository stars: 35,763 · Incomplete scan
Skill
performing-ssrf-vulnerability-exploitation
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-ssrf-vulnerability-exploitation
Tests web application URL parameters for Server-Side Request Forgery by probing cloud metadata endpoints (AWS/GCP/Azure at 169.254.169.254), internal network services, and protocol handlers (file://, gopher://, dict://) using a Python script, including IP-encoding bypass and DNS rebinding checks. Use during authorized penetration testing to confirm SSRF in a URL-fetching parameter and generate a vulnerability report.
Repository stars: 35,763 · Incomplete scan
Skill
detecting-azure-service-principal-abuse
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-azure-service-principal-abuse
Detect Azure service principal abuse in Microsoft Entra ID using KQL detection queries (Sentinel/Splunk) against Azure AD Audit and Sign-in Logs, covering added credentials, privileged role assignment, admin consent bypass, and service principal enumeration. Use when investigating suspected privilege escalation or persistence via service principals, or building threat-hunting queries for Entra ID identity abuse.
Repository stars: 35,763 · Incomplete scan
Skill
implementing-api-threat-protection-with-apigee
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-api-threat-protection-with-apigee
Implements API threat protection using Google Apigee reverse-proxy policies, including JSON/XML threat protection, OAuth 2.0 enforcement, SpikeArrest rate limiting, regex-based threat detection, and Advanced API Security for detecting malicious clients. Use when shielding APIs proxied through Apigee against OWASP API Security Top 10 threats and malicious client abuse patterns.
Repository stars: 35,763 · Incomplete scan
Skill
testing-api-security-with-owasp-top-10
mukul975/Anthropic-Cybersecurity-Skills · skills/testing-api-security-with-owasp-top-10
Systematically assesses REST, GraphQL, and gRPC API endpoints against the OWASP API Security Top 10 (2023) using Burp Suite and Postman for automated and manual testing. Use during authorized API penetration tests, before deploying new endpoints to production, or when validating API gateway controls and rate limiting.
Repository stars: 35,763 · Incomplete scan
Skill
implementing-gdpr-data-protection-controls
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-gdpr-data-protection-controls
Implements GDPR (EU 2016/679) technical and organizational measures — privacy by design/default, DPIAs, data subject rights management, 72-hour breach notification, and cross-border transfer mechanisms (SCCs, BCRs, adequacy). Use when designing or auditing GDPR controls, building a DPIA, handling data subject access/erasure requests, or assessing cross-border data transfers.
Repository stars: 35,763 · Incomplete scan
Skill
detecting-cryptomining-in-cloud
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-cryptomining-in-cloud
This skill teaches security teams how to detect and respond to unauthorized cryptocurrency mining operations in cloud environments. It covers identifying cryptomining indicators through compute usage anomalies, network traffic patterns to mining pools, GuardDuty CryptoCurrency findings, and runtime process monitoring on EC2, ECS, EKS, and Azure Automation workloads.
Repository stars: 35,763 · Incomplete scan
Skill
implementing-purdue-model-network-segmentation
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-purdue-model-network-segmentation
Implement network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model, separating ICS networks into hierarchical security zones from Level 0 physical process through Level 5 enterprise and enforcing strict traffic control through IEC 62443-aligned DMZs between OT and IT domains. Use when designing ICS/SCADA network zones or segmenting OT from IT networks.
Repository stars: 35,763 · Incomplete scan
Skill
conducting-mobile-app-penetration-test
mukul975/Anthropic-Cybersecurity-Skills · skills/conducting-mobile-app-penetration-test
Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities in data storage, network communication, authentication, cryptography, and platform-specific security controls. The tester performs static analysis of application binaries, dynamic analysis at runtime, and API security testing to evaluate the complete mobile attack surface. Activates for requests involving mobile app pentest, iOS security assessment, Android security testing, or OWASP MASTG assessment.
Repository stars: 35,763 · Incomplete scan
Skill
deploying-edr-agent-with-crowdstrike
mukul975/Anthropic-Cybersecurity-Skills · skills/deploying-edr-agent-with-crowdstrike
Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threat detection, behavioral analysis, and automated response. Use when onboarding endpoints to EDR coverage, configuring detection policies, or integrating Falcon telemetry with SIEM platforms. Activates for requests involving CrowdStrike deployment, Falcon sensor installation, EDR policy configuration, or endpoint detection and response.
Repository stars: 35,763 · Incomplete scan
Skill
implementing-disk-encryption-with-bitlocker
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-disk-encryption-with-bitlocker
Implements full disk encryption using Microsoft BitLocker on Windows endpoints to protect data at rest from unauthorized access in case of device loss or theft. Use when deploying encryption for compliance requirements, securing mobile workstations, or implementing data protection controls across the enterprise. Activates for requests involving BitLocker encryption, disk encryption, TPM configuration, or data-at-rest protection.
Repository stars: 35,763 · Incomplete scan
Skill
performing-access-recertification-with-saviynt
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-access-recertification-with-saviynt
Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA. Use when launching or managing certification campaigns for users/entitlements, remediating access review findings, or documenting identity governance evidence for an audit.
Repository stars: 35,763 · Incomplete scan
Skill
analyzing-indicators-of-compromise
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-indicators-of-compromise
Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence, campaign attribution, and blocking priority. Use when triaging IOCs from phishing emails, security alerts, or external threat feeds; enriching raw IOCs with multi-source intelligence; or making block/monitor/whitelist decisions. Activates for requests involving VirusTotal, AbuseIPDB, MalwareBazaar, MISP, or IOC enrichment pipelines.
Repository stars: 35,763 · Incomplete scan
Skill
performing-asset-criticality-scoring-for-vulns
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-asset-criticality-scoring-for-vulns
Build a multi-factor asset criticality scoring model—incorporating data sensitivity, business function dependency, regulatory scope, network exposure, and recoverability—to produce a 1-5 criticality tier that weights vulnerability prioritization and remediation SLAs. Use when prioritizing vulnerability remediation by business impact or aligning CMDB asset data with risk-based patching timelines.
Repository stars: 35,763 · Incomplete scan
Skill
performing-aws-privilege-escalation-assessment
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-aws-privilege-escalation-assessment
Performing authorized privilege escalation assessments in AWS environments to identify IAM misconfigurations that allow users or roles to elevate their permissions using Pacu, CloudFox, Principal Mapper, and manual IAM policy analysis techniques.
Repository stars: 35,763 · Incomplete scan
Skill
building-patch-tuesday-response-process
mukul975/Anthropic-Cybersecurity-Skills · skills/building-patch-tuesday-response-process
Establish a repeatable operational process for triaging, testing, and deploying Microsoft Patch Tuesday security updates (Windows, Office, Exchange, SQL Server, Azure) via WSUS/SCCM within risk-based remediation SLAs, from advisory review through validation. Use when building or improving a monthly patch management workflow or prioritizing which CVEs to remediate first.
Repository stars: 35,763 · Incomplete scan
Skill
hunting-for-unusual-network-connections
mukul975/Anthropic-Cybersecurity-Skills · skills/hunting-for-unusual-network-connections
Runs a hypothesis-driven threat hunt for command-and-control activity (T1071) by querying SIEM/EDR network telemetry for anomalous outbound traffic, rare destinations, non-standard ports, and unusual connection frequencies from endpoints. Use when hunting for beaconing/C2 traffic, after threat intel flags suspicious infrastructure, or when alerts fire on anomalous connections.
Repository stars: 35,763 · Incomplete scan
Skill
implementing-network-traffic-baselining
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-network-traffic-baselining
Builds network traffic baselines from NetFlow/IPFIX CSV or JSON exports using Python pandas, computing hourly/daily volume distributions, per-host and protocol/port statistics, and top-talker profiles, then flags outliers via z-score and IQR anomaly detection. Use when a SOC analyst needs to establish normal traffic patterns and surface deviations such as data exfiltration spikes, beaconing, or unusual port usage from historical flow data.
Repository stars: 35,763 · Incomplete scan
Skill
analyzing-slack-space-and-file-system-artifacts
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-slack-space-and-file-system-artifacts
Examine NTFS slack space, MFT entries, the USN Change Journal, and Alternate Data Streams (ADS) to recover hidden or residual data, reconstruct deleted-file metadata, and reconstruct available file-system change activity from USN records. Use during deep forensic analysis of an NTFS image when standard file recovery is insufficient, such as hunting for data hidden in ADS.
Repository stars: 35,763 · Incomplete scan
Skill
performing-ai-driven-osint-correlation
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-ai-driven-osint-correlation
Use AI/LLM-based reasoning with Sherlock, theHarvester, and SpiderFoot to correlate OSINT findings—usernames, emails, social profiles, domain records, breach databases, and dark-web mentions—into unified, confidence-scored intelligence profiles with link analysis. Use when raw OSINT data from multiple sources needs merging into one target profile or resolving identity linkage across platforms.
Repository stars: 35,763 · Incomplete scan
Skill
analyzing-malicious-url-with-urlscan
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-malicious-url-with-urlscan
URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolat
Repository stars: 35,763 · Incomplete scan
Skill
implementing-rsa-key-pair-management
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-rsa-key-pair-management
Generates, stores, rotates, and manages RSA key pairs following NIST SP 800-57 guidelines, covering serialization formats (PEM, DER, PKCS#8), passphrase protection, and key strength validation. Use when creating or rotating RSA keys for signatures, key exchange, or encryption, or when auditing existing keys for proper storage and NIST-compliant strength.
Repository stars: 35,763 · Incomplete scan
Skill
analyzing-ransomware-encryption-mechanisms
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-ransomware-encryption-mechanisms
Analyzes encryption algorithms, key management, and file encryption routines used by ransomware families to assess decryption feasibility, identify implementation weaknesses, and support recovery efforts. Covers AES, RSA, ChaCha20, and hybrid encryption schemes. Activates for requests involving ransomware cryptanalysis, encryption analysis, key recovery assessment, or ransomware decryption feasibility.
Repository stars: 35,763 · Incomplete scan
Skill
conducting-social-engineering-penetration-test
mukul975/Anthropic-Cybersecurity-Skills · skills/conducting-social-engineering-penetration-test
Design and execute a social engineering penetration test combining OSINT-driven target profiling with phishing, vishing, smishing, and physical pretexting campaigns using tools like GoPhish, the Social Engineer Toolkit (SET), and Evilginx to measure human security resilience. Use when scoping or running an authorized human-attack-surface test and reporting results to identify security awareness training gaps.
Repository stars: 35,763 · Incomplete scan
Skill
detecting-compromised-cloud-credentials
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-compromised-cloud-credentials
Detect compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible-travel patterns, and credential-stuffing indicators using GuardDuty, Microsoft Defender for Identity, and Google SCC Event Threat Detection. Use when investigating alerts about cloud API activity from unfamiliar locations, responding to an exposed-credential notification, or scoping a credential compromise.
Repository stars: 35,763 · Incomplete scan
Skill
implementing-api-security-testing-with-42crunch
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-api-security-testing-with-42crunch
Implements API security testing on the 42Crunch platform, combining API Audit for static analysis of OpenAPI definitions, API Conformance Scan for dynamic vulnerability testing, and API Protect for runtime threat prevention, integrated into CI/CD pipelines and IDEs. Use when shift-left testing APIs for OWASP API Security Top 10 vulnerabilities or setting up 42Crunch audit and conformance scanning.
Repository stars: 35,763 · Incomplete scan
Skill
detecting-golden-ticket-attacks-in-kerberos-logs
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-golden-ticket-attacks-in-kerberos-logs
Detect Golden Ticket attacks in Active Directory using Splunk and KQL queries against domain controller event logs, looking for Kerberos TGT anomalies such as mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures. Use when hunting for Kerberos ticket forgery or krbtgt-based persistence (MITRE T1558.001) in AD environments.
Repository stars: 35,763 · Incomplete scan
Skill
performing-cryptographic-audit-of-application
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-cryptographic-audit-of-application
A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco
Repository stars: 35,763 · Incomplete scan
Skill
analyzing-golang-malware-with-ghidra
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a garble-packed Go binary, or recovering function names and third-party dependencies from a stripped Go executable.
Repository stars: 35,763 · Incomplete scan
Skill
vercel-optimize
vercel-labs/agent-skills · skills/vercel-optimize
Use for Vercel cost and performance optimization on deployed projects, especially Next.js, SvelteKit, Nuxt, and limited Astro apps. Collect Vercel metrics, usage, project config, and code scan results first; investigate only metric-backed candidates; produce ranked recommendations grounded in verified files and version-aware Vercel/framework docs. Trigger for Vercel bill reduction, slow or expensive routes, caching opportunities, Function Invocations, Build Minutes, Fast Data Transfer, Core Web Vitals, Bot Management, Fluid compute, or cost breakdown requests.
Repository stars: 33,697 · Incomplete scan
Skill
vercel-react-best-practices
vercel-labs/agent-skills · skills/react-best-practices
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
Repository stars: 33,697 · Incomplete scan
Skill
vercel-composition-patterns
vercel-labs/agent-skills · skills/composition-patterns
React composition patterns that scale. Use when refactoring components with boolean prop proliferation, building flexible component libraries, or designing reusable APIs. Triggers on tasks involving compound components, render props, context providers, or component architecture. Includes React 19 API changes.
Repository stars: 33,697 · Incomplete scan
Skill
web-design-guidelines
vercel-labs/agent-skills · skills/web-design-guidelines
Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".
Repository stars: 33,697 · Incomplete scan
Skill
vercel-cli-with-tokens
vercel-labs/agent-skills · skills/vercel-cli-with-tokens
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Repository stars: 33,697 · Incomplete scan
Skill
writing-guidelines
vercel-labs/agent-skills · skills/writing-guidelines
Review docs/prose for Writing Guidelines compliance. Use when asked to "review my docs", "check writing style", "audit prose", "review docs voice and tone", or "check this page against the writing handbook".
Repository stars: 33,697 · Incomplete scan
Skill
deploy-to-vercel
vercel-labs/agent-skills · skills/deploy-to-vercel
Deploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".
Repository stars: 33,697 · Incomplete scan
Skill
vercel-react-view-transitions
vercel-labs/agent-skills · skills/react-view-transitions
Guide for implementing smooth, native-feeling animations using React's View Transition API (`<ViewTransition>` component, `addTransitionType`, and CSS view transition pseudo-elements). Use this skill whenever the user wants to add page transitions, animate route changes, create shared element animations, animate enter/exit of components, animate list reorder, implement directional (forward/back) navigation animations, or integrate view transitions in Next.js. Also use when the user mentions view transitions, `startViewTransition`, `ViewTransition`, transition types, or asks about animating between UI states in React without third-party animation libraries.
Repository stars: 33,697 · Incomplete scan
Skill
vercel-react-native-skills
vercel-labs/agent-skills · skills/react-native-skills
React Native and Expo best practices for building performant mobile apps. Use when building React Native components, optimizing list performance, implementing animations, or working with native modules. Triggers on tasks involving React Native, Expo, mobile performance, or native platform APIs.
Repository stars: 33,697 · Incomplete scan
Skill
ctx-stats
mksglu/context-mode · plugins/claude-code/claude-code/skills/ctx-stats
Show how much context context-mode saved, as a detailed report.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-upgrade
mksglu/context-mode · plugins/claude-code/codex/skills/ctx-upgrade
Update context-mode to the latest release.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-doctor
mksglu/context-mode · skills/ctx-doctor
Check that context-mode is installed and working, as a table.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-upgrade
mksglu/context-mode · plugins/claude-code/claude-code/skills/ctx-upgrade
Update context-mode to the latest release.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-doctor
mksglu/context-mode · plugins/claude-code/codex/skills/ctx-doctor
Check that context-mode is installed and working, as a table.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-doctor
mksglu/context-mode · plugins/claude-code/pi/skills/ctx-doctor
Check that context-mode is installed and working, as a table.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-doctor
mksglu/context-mode · plugins/claude-code/claude-code/skills/ctx-doctor
Check that context-mode is installed and working, as a table.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-upgrade
mksglu/context-mode · skills/ctx-upgrade
Update context-mode to the latest release.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-stats
mksglu/context-mode · plugins/claude-code/codex/skills/ctx-stats
Show how much context context-mode saved, as a detailed report.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-stats
mksglu/context-mode · plugins/claude-code/skills/ctx-stats
Show how much context context-mode saved, as a detailed report.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-stats
mksglu/context-mode · plugins/claude-code/pi/skills/ctx-stats
Show how much context context-mode saved, as a detailed report.
Repository stars: 33,656 · Incomplete scan
Skill
ctx-upgrade
mksglu/context-mode · plugins/claude-code/skills/ctx-upgrade
Update context-mode to the latest release.
Repository stars: 33,656 · Incomplete scan
Automated signals, not a guarantee. How the checks work.
