Screen AI application inputs and historical logs for prompt injection, where malicious instructions try to redirect the model. Combine pattern matching, text structure scoring, and a DeBERTa classifier to flag suspicious content and produce JSON results.
- Screening chatbot and AI agent inputs
- Checking external text used in retrieval-based AI applications
- Auditing historical interaction logs for injection attempts
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Deploy Suricata to detect suspicious network traffic or block it inline. Configure protocol inspection, detection rules, and structured EVE JSON logs, then connect logs to analysis platforms and check packet drops and alert quality during operation.
- Deploying network intrusion monitoring
- Configuring inline blocking of malicious traffic
- Adding custom detection rules and reducing noisy alerts
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Reconstruct activity on a compromised computer by combining file timestamps, event logs, browser history, and other evidence into one timeline. Extract and filter events with Plaso, then review and annotate them collaboratively in Timesketch.
- Reconstructing the sequence of a computer compromise
- Comparing events across logs and file records
- Investigating timestamp changes and cleared logs
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Reconstruct USB device usage on Windows by comparing registry records, Event Logs, and device installation logs. Identify devices, correlate connection times and drive letters, and build a timeline for removable media investigations.
- Investigating suspected data removal through USB storage
- Checking whether unapproved USB devices were connected
- Correlating USB connections with malware execution
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Search public TLS certificate records through crt.sh and pycrtsh to investigate lookalike domains, unexpected certificate issuers, and untracked IT assets. Compare domain spellings and review certificate details to support phishing detection and certificate monitoring.
- Finding domains that imitate a brand
- Reviewing unexpected certificate issuers
- Investigating untracked domains and IT assets
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Investigate Linux intrusions using auditd records. Configure audit rules, search events with ausearch, summarize activity with aureport, reconstruct a timeline of suspicious actions, and forward logs to a central security monitoring system.
- Investigating unauthorized access or privilege escalation
- Checking changes to critical files and SSH keys
- Reconstructing an incident timeline
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Analyze access logs from AWS API Gateway, Kong, and Nginx with pandas, a Python data analysis library. Examine resource access patterns, authentication failures, and suspicious requests to investigate API abuse and inform detection rules.
- Investigating sequential access to resource IDs
- Examining spikes in authentication failures
- Checking for rate limit bypass and injection attempts
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Analyze Kubernetes API server audit logs to identify pod access, secret reads, permission changes, privileged pods, and anonymous requests. Use the event patterns to reconstruct suspicious activity and develop detection rules for security monitoring systems.
- Tracing API activity during a suspected cluster compromise
- Reviewing access to Kubernetes secrets
- Investigating permission changes and privileged pods
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Analyze DNS query logs for signs of hidden data transfers and attacker command channels. This skill uses unusual name lengths, randomness, and traffic volumes, then correlates findings with endpoint processes and estimates possible data loss.
- Investigating suspected data theft through DNS
- Finding algorithmically generated domains used by malware
- Reviewing hosts with unusually high DNS query volumes
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Examine Linux authentication logs, shell history, SSH keys, scheduled tasks, and system settings to investigate a compromise. Help reconstruct activity, identify ways attackers maintain access, and document suspicious accounts, files, and configuration changes.
- Investigating a potentially compromised Linux server
- Finding mechanisms that maintain unauthorized access
- Tracing user activity through logs and command history
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Investigate production issues by searching Datadog logs, querying metrics, and following request traces across services. Compare error counts across time periods, inspect surrounding logs, and manage dashboards through a command-line tool.
- Investigating errors in production
- Comparing error counts across time periods
- Following request traces across services
davila7/claude-code-templates☆ 32.8KUpdated Oct 21, 2026
Analyze large logs, test results, API responses, and files outside the conversation, then return focused findings. It guides agents to save, process, index, and search outputs while limiting how much raw data enters their working context.
- Extracting errors from large logs
- Summarizing test failures and build warnings
- Inspecting JSON and CSV data
mksglu/context-mode☆ 31.6KUpdated Oct 21, 2026
Add a NanoClaw status icon to the macOS menu bar. Check whether the service is running through a green or red dot, then start, stop, restart, or open its logs from the menu.
- Checking NanoClaw's running status
- Starting or stopping the service from the menu bar
- Restarting after code changes
nanocoai/nanoclaw☆ 31KUpdated Oct 21, 2026
Install a local NanoClaw dashboard to inspect agents, sessions, channels, messages, and users. It displays token usage, context usage, activity, and live logs using periodic data snapshots and a log forwarding module.
- Checking agent and session status in one place
- Reviewing token and context usage
- Following live logs with level filters
nanocoai/nanoclaw☆ 31KUpdated Oct 21, 2026
Maintain Composio's documentation site and record documentation decisions. Work on content, Fumadocs configuration, changelogs, automation prompts, and review guidance, including ADR-style records that capture decisions and their rationale.
- Update Composio documentation content and changelogs
- Revise Fumadocs settings and documentation automation prompts
- Record or update documentation decisions
ComposioHQ/composio☆ 30.7KUpdated Oct 21, 2026
Create roadmap updates, release notes, and feature announcements tailored to executives, engineering teams, or customers. Choose a suitable roadmap format and generate changelogs from Git history, making progress, user value, dependencies, and next actions clear.
- Prepare roadmap updates for executives
- Explain scope and dependencies to engineering teams
- Write customer release notes and feature announcements
alirezarezvani/claude-skills☆ 28.5KUpdated Aug 30, 2026
Official · CodexFreeSummary Investigate failed pull request checks in GitHub Actions using the GitHub CLI. The skill gathers logs, summarizes failures, proposes a repair plan, and applies changes after explicit approval, with a summary of changes and tests.
- Investigating failed GitHub Actions checks
- Reviewing a repair plan before approving changes
- Summarizing failure logs for a pull request
openai/skills☆ 28.2KUpdated Sep 9, 2026
Build and review JetBrains plugin interfaces using Swing and IntelliJ Platform components. Follow concrete rules for layouts, theme colors, fonts, spacing, dialogs, and tool windows while keeping shared style values consistent.
- Building tool windows and settings screens
- Reviewing theme colors, fonts, and spacing
- Choosing components for dialogs and notifications
Kilo-Org/kilocode☆ 27.7KUpdated Oct 21, 2026
Prepare software releases by detecting version files, reviewing changes, and writing changelogs in multiple languages. The workflow updates versions, creates annotated tags with release notes, and can publish GitHub Releases or fill in missing historical releases.
- Preparing a new version from recent changes
- Updating changelogs in multiple languages
- Previewing release changes without modifying files
JimLiu/baoyu-skills☆ 26.8KUpdated Sep 11, 2026
Official · GoogleFreeSummary Investigate stalled TPU training across multiple slices on GKE using hang reports, logs, and latency metrics. Separate compilation inconsistencies and data input stalls from hardware or network faults, and identify the relevant nodes for further investigation.
- Investigating HANG_DETECTED logs during TPU training
- Separating input stalls from hardware faults
- Mapping reported faulty instances to GKE nodes
google/skills☆ 21.5KUpdated Oct 21, 2026
Official · GoogleFreeSummary Evaluate whether Google SecOps rules detect threats described in articles or supplied text. Generate simulated attack logs, identify coverage gaps, summarize matching rules, and create rules for uncovered threats, with user approval before adding them.
- Evaluate detection coverage for threats described in a blog
- Test existing rules with simulated attack logs
- Review matching rules and their alerting status
google/skills☆ 21.5KUpdated Oct 21, 2026
Investigate Sentry alerts using Datadog logs and recent GitHub changes, then post an initial diagnosis with a severity assessment. Notify the on-call team when severity reaches the configured threshold or the investigation remains inconclusive, without changing monitored systems.
- Investigate new and unresolved Sentry alerts
- Compare failures with logs and recent deployments
- Notify on-call staff for severe or inconclusive alerts
kortix-ai/suna☆ 20.3KUpdated Oct 21, 2026
Install and configure OpenSearch for storing, searching, and analyzing KubeSphere logs, events, audit records, and notification history. Adjust storage and memory, enable a visualization interface, and manage scheduled cleanup of old search indexes.
- Preparing storage for logs and event history
- Enabling OpenSearch Dashboards
- Adjusting storage capacity and memory
kubesphere/kubesphere☆ 17.1KUpdated Jul 15, 2026
Install and configure WizTelemetry Logging in KubeSphere to collect container output and file logs. Use its API to filter logs by workload, time, or keywords, retrieve statistics, and export results.
- Deploy log collection to selected clusters
- Enable collection of log files inside containers
- Search logs by keyword, workload, and time
kubesphere/kubesphere☆ 17.1KUpdated Jul 15, 2026