Investigate suspicious privilege increases, including Windows UAC approval bypasses and Linux sudo or setuid abuse. Use registry changes, process relationships, and permission changes to identify possible abuse and document affected hosts, methods, and risk levels.
- Investigating Windows UAC bypass activity
- Tracing how administrative access was obtained
- Monitoring Linux sudo and setuid abuse
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Build dashboards that show how long vulnerabilities remain unresolved and compare remediation times with severity-based deadlines. Define response policies, automate escalation notices, and report compliance rates and other measures of remediation progress.
- Define vulnerability remediation deadlines
- Visualize overdue vulnerabilities
- Automate reminders and management escalations
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Audit Kubernetes access rules to find excessive permissions and service account token abuse paths. Trace which users or workloads could gain cluster administrator access, then produce prioritized findings and recommendations for reducing permissions.
- Reviewing Kubernetes privilege escalation paths
- Checking permissions after an RBAC change
- Tracing workloads with overprivileged service accounts
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Review Active Directory permissions with ldap3, a Python library for directory queries. Identify excessive access granted to non-administrative accounts, explain potential privilege escalation paths, and produce a JSON report with affected objects and remediation recommendations.
- Auditing excessive Active Directory permissions
- Investigating privilege escalation paths from ordinary accounts
- Reporting affected objects and permission remediation recommendations
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Create or update step-by-step instructions for recurring operational tasks. Document exact commands, expected results, failure responses, verification checks, rollback steps, and escalation contacts so operations teams have a concrete procedure to follow.
- Documenting recurring operational tasks
- Turning experienced staff knowledge into written procedures
- Adding troubleshooting and rollback steps to existing instructions
anthropics/knowledge-work-plugins☆ 30.7KUpdated Oct 20, 2026
Review unresolved Plain support tickets for missed response or resolution deadlines, VIP accounts, and serious problems. Route qualifying tickets to the responsible team, create linked Linear issues for engineering work, and post internal Slack alerts.
- Check unresolved tickets for missed service deadlines
- Route VIP requests and serious incidents
- Create linked Linear issues for engineering
kortix-ai/suna☆ 20.3KUpdated Oct 20, 2026
Draft, rewrite, or shorten emails to match the audience, tone, and desired length. Produce a subject line and complete message with clear next steps, with optional alternative versions for outreach, replies, updates, or escalations.
- Draft an initial outreach email
- Adjust a reply to suit the recipient
- Shorten a status update
composio-community/awesome-codex-skills☆ 17KUpdated Jul 26, 2026
Update individual settings in an existing product counsel profile, such as risk thresholds, escalation contacts, launch review categories, or marketing claims rules. The guided process explains downstream effects, checks inconsistencies, and saves confirmed changes without repeating setup.
- Adjust risk thresholds used in product legal reviews
- Update escalation contacts and product partners
- Add a category to the launch review framework
anthropics/claude-for-legal☆ 9.8KUpdated Oct 14, 2026
Update an existing AI governance profile through guided changes. Adjust risk posture, escalation contacts, registered use cases, vendor positions, or assessment formats, while checking downstream effects and inconsistencies before saving each change.
- Adjusting risk posture for AI use-case reviews
- Updating escalation contacts and approvers
- Changing approved or conditional AI use cases
anthropics/claude-for-legal☆ 9.8KUpdated Oct 14, 2026
Identify who should approve a contract issue using the team’s approval matrix and contract guidelines. The skill checks authority limits and exceptions, then drafts a request with the relevant wording, options, recommendation, and decision deadline.
- Finding the approver for an unlimited liability clause
- Checking approval authority for a contract’s value
- Drafting an approval request from a contract review memo
anthropics/claude-for-legal☆ 9.8KUpdated Oct 14, 2026
Set up an employment legal practice profile through an interview and supplied documents. Record employee locations, hiring and termination review triggers, severance practices, and escalation contacts, then build a jurisdiction-specific table for routing issues to the appropriate reviewer.
- Set up the employment legal plugin
- Record countries and states where employees work
- Configure hiring and termination review triggers
anthropics/claude-for-legal☆ 9.8KUpdated Oct 14, 2026
Investigate how a limited Linux account could gain root, the system administrator's privileges. The skill guides checks of permissions, scheduled tasks, services, and known vulnerabilities, while outlining evidence defenders can monitor during authorized security assessments.
- Assessing Linux privilege escalation paths
- Practicing privilege escalation in CTF challenges
- Reviewing sudo and scheduled task configurations
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
Analyze incoming Slack messages, emails, or escalations before replying. Separate the explicit request from the outcome behind it, clarify requirements and success criteria, and develop a reply or counterproposal while clearly labeling assumptions.
- Analyzing an executive's urgent request before replying
- Clarifying the outcome behind a vague feature request
- Preparing a response to an escalation email
deanpeters/Product-Manager-Skills☆ 7.5KUpdated Oct 16, 2026
Assess AWS security through penetration testing, a process for checking exploitable weaknesses. Examine IAM permissions, storage, compute resources, and credential exposure to identify privilege escalation paths and document security audit findings.
- Review IAM permissions for privilege escalation paths
- Assess S3 bucket access and exposed files
- Check credential exposure through EC2 metadata
zebbern/claude-code-guide☆ 4.7KUpdated Oct 20, 2026
Handles customer situations that have exceeded normal support — severity assessment, incident communication, executive escalation, and recovering a relationship after a failure. Use this when a customer issue is escalating or has gone to leadership, during a customer-affecting outage, when a major account is at risk, when a relationship needs repairing after a failure, or to design the escalation path itself.
The English summary is being prepared. Showing the original description.
cbrock84/headcount☆ 2.1KUpdated Oct 19, 2026
Guides the Privacy Threshold Analysis screening process to determine whether a full DPIA is required. Provides a quick-screen questionnaire, threshold criteria based on WP248rev.01, escalation triggers, and documentation requirements. Activate when evaluating new processing activities, system changes, or procurement decisions. Keywords: PTA, privacy threshold analysis, DPIA screening, quick-screen, threshold criteria, WP248, escalation triggers.
The English summary is being prepared. Showing the original description.
mukul975/Privacy-Data-Protection-Skills☆ 313Updated Mar 17, 2026
Builds a comprehensive breach response team playbook defining CSIRT and privacy team structure with named roles (incident commander, legal counsel, communications, IT forensics, DPO), escalation matrices, communication templates, pre-negotiated vendor contacts, and regulatory authority contacts organized by jurisdiction. Keywords: breach response playbook, CSIRT, incident response team, escalation matrix, communication templates, vendor contacts.
The English summary is being prepared. Showing the original description.
mukul975/Privacy-Data-Protection-Skills☆ 313Updated Mar 17, 2026
5-level error recovery escalation: retry, nudge, replan, fallback, force-done — each with entry criteria and timeout before escalating
The English summary is being prepared. Showing the original description.
oimiragieo/agent-studio☆ 42Updated Jul 14, 2026
Design AI-to-human escalation systems. TRIGGERS - Use when user needs help with ai-escalation-system related tasks.
The English summary is being prepared. Showing the original description.
lionelsimai/claude-skills-collection☆ 30Updated Feb 8, 2026
Design escalation policies — tiers, timeouts, stakeholder matrices, and escalation paths that actually work.
The English summary is being prepared. Showing the original description.
aicodedecode/awesome-muse-skills☆ 25Updated Oct 10, 2026
Test AI agent systems for tool abuse, unauthorized actions, privilege escalation through tool chaining, and safety bypass via agentic workflows. Use this skill when assessing autonomous AI agents that use tool-calling (function calling, plugins, actions) to interact with external systems. Covers multi-step attack chains, implicit trust exploitation, and capability boundary testing for AI agents.
The English summary is being prepared. Showing the original description.
ShulkwiSEC/bb-huge☆ 23Updated Jul 11, 2026
Use this skill when designing, auditing, or troubleshooting behavioral boundaries for Agentforce agents — including topic (now subagent) Scope fields, agent-level system instructions, topic/action filters, the Escalation topic, restricted topics, and Instruction Adherence monitoring. Trigger keywords: agent guardrails, agent out of scope, restrict agent behavior, topic scope, subagent scope, agent fallback, Escalation topic, abuse prevention, action filters. NOT for Trust Layer content filtering (Einstein Trust Layer is a separate product concern), NOT for general topic routing design (use agentforce/agent-topic-design), NOT for prompt template construction (use agentforce/prompt-builder-templates).
The English summary is being prepared. Showing the original description.
PranavNagrecha/AwesomeSalesforceSkills☆ 19Updated Oct 20, 2026
Configuring Salesforce case management: case queues, assignment rules, escalation rules, auto-response rules, Email-to-Case, Web-to-Case, case teams, entitlements, and milestones. Use when setting up or troubleshooting the Service Cloud case handling layer. Trigger keywords: email-to-case, web-to-case, escalation rules, case teams, entitlements, milestones, auto-response, case queue. NOT for Standard vs On-Demand Email-to-Case and routing-address setup — use admin/email-to-case-configuration. NOT for routing case work items to agents — use admin/omni-channel-routing-setup.
The English summary is being prepared. Showing the original description.
PranavNagrecha/AwesomeSalesforceSkills☆ 19Updated Oct 20, 2026
Operational decision frameworks: triage, escalation, case management, billing ops. Use for 'how to handle X cases', 'build triage', 'escalation protocol'.
The English summary is being prepared. Showing the original description.
ngocsangyem/MeowKit☆ 15Updated Jul 28, 2026