Analyze suspicious Linux ELF executables through file inspection, runtime tracing, and reverse engineering. Identify malware behavior, network destinations, and persistence mechanisms, then organize findings and indicators for investigations involving servers, containers, or cloud infrastructure.
- Triaging suspicious executables on Linux servers
- Investigating suspected cryptominers
- Analyzing malware found in containers
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Diagnose Fedora Linux problems with a structured troubleshooting plan. Get commands for checking services, logs, and packages, followed by remediation, validation, and rollback steps that account for SELinux and firewalld where relevant.
- Investigating a service that will not start
- Troubleshooting package-related problems
- Checking SELinux or firewall involvement
github/awesome-copilot☆ 40.2KUpdated Oct 17, 2026
Inspect Linux scheduled tasks, services, shell profiles, shared library settings, and SSH keys for mechanisms that maintain attacker access. Correlate findings with audit logs to produce a timeline, risk scores, and remediation commands.
- Investigating how attackers maintained access to a Linux host
- Hunting for suspicious scheduled tasks and services
- Building a timeline from persistence-related audit events
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Acquire Linux memory with LiME and examine it using Volatility 3. Extract processes, network connections, command history, loaded kernel modules, and signs of injected code to support investigations of compromised Linux systems.
- Acquiring memory from a compromised Linux system
- Comparing process lists to investigate hidden processes
- Reviewing command history and network connections
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Examine Linux authentication logs, shell history, SSH keys, scheduled tasks, and system settings to investigate a compromise. Help reconstruct activity, identify ways attackers maintain access, and document suspicious accounts, files, and configuration changes.
- Investigating a potentially compromised Linux server
- Finding mechanisms that maintain unauthorized access
- Tracing user activity through logs and command history
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Investigate Linux intrusions using auditd records. Configure audit rules, search events with ausearch, summarize activity with aureport, reconstruct a timeline of suspicious actions, and forward logs to a central security monitoring system.
- Investigating unauthorized access or privilege escalation
- Checking changes to critical files and SSH keys
- Reconstructing an incident timeline
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Build and improve Windows desktop apps with C#, WinUI 3, and the Windows App SDK. Guidance covers development setup, native interface design, implementation, troubleshooting, packaging choices, and verification through both builds and actual app launches.
- Checking and preparing a WinUI development environment
- Creating a new Windows desktop app
- Improving navigation, themes, and adaptive layouts
openai/skills☆ 28.2KUpdated Sep 9, 2026
Investigate how a limited Linux account could gain root, the system administrator's privileges. The skill guides checks of permissions, scheduled tasks, services, and known vulnerabilities, while outlining evidence defenders can monitor during authorized security assessments.
- Assessing Linux privilege escalation paths
- Practicing privilege escalation in CTF challenges
- Reviewing sudo and scheduled task configurations
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
Diagnose Arch Linux problems by reviewing recent updates, service logs, and packages. Get a step-by-step investigation plan, ready-to-copy repair commands, verification steps, and guidance for rollback or cleanup.
- Investigating problems after an Arch Linux update
- Diagnosing services that fail to start
- Planning repairs with verification and rollback steps
github/awesome-copilot☆ 40.2KUpdated Oct 17, 2026
Investigate Linux kernel rootkits, malware that hides inside the operating system's core. Analyze memory dumps with Volatility3, compare system views, and run live scans to identify hidden modules, altered calls, and suspicious inconsistencies.
- Investigate suspected Linux rootkit infections
- Find hidden kernel modules in memory dumps
- Compare module lists for signs of concealment
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Draft board and committee meeting minutes using the format of past minutes. Organize agendas, supplied materials, attendance, resolutions, and votes into a draft, with placeholders and a checklist for attorney review.
- Drafting board minutes from an agenda and presentation slides
- Matching committee minutes to an established house format
- Checking attendance, quorum, and voting details before review
anthropics/claude-for-legal☆ 9.7KUpdated Oct 14, 2026
Trace SSH keys, tokens, and other credentials in Linux CTF environments. Connect each recovered artifact to the service that accepts it, then document the resulting privileges or movement to another host.
- Trace where recovered SSH keys and tokens are accepted
- Document privilege gains through sockets or sudo
- Explain movement between Linux challenge hosts
zhaoxuya520/reverse-skill☆ 42.6KUpdated Sep 22, 2026
Guide desktop actions on a connected Linux computer using accessibility information that identifies buttons and fields. It covers checking keyboard focus, verifying results with screenshots, and handling limitations in XWayland apps and remote desktop viewers.
- Operate Linux buttons and fields using accessibility information
- Verify the input window before typing
- Work with remote desktop viewers
agent0ai/agent-zero☆ 19.5KUpdated Oct 15, 2026
Diagnose CentOS problems using service status, logs, and RHEL-compatible commands. Get remediation commands, checks after major changes, and rollback steps, with attention to SELinux access controls and the firewalld firewall where relevant.
- Investigating a service that will not start
- Diagnosing package installation or update failures
- Checking SELinux or firewall restrictions
github/awesome-copilot☆ 40.2KUpdated Oct 17, 2026
Start and control Minutes Coach, the separate real-time copilot HUD, with an explicit meeting goal. Use only for explicit Coach or HUD lifecycle requests such as "start Minutes Coach", "open the Coach HUD", "pause Minutes Coach", "resume Minutes Coach", "Minutes Coach status", or "stop Minutes Coach". Do not use for requests that explicitly ask the current terminal agent to watch or strategize; those belong to minutes-live-sidekick. An ambiguous request such as "coach me live" requires one short surface clarification and must not automatically start Coach.
The English summary is being prepared. Showing the original description.
silverstein/minutes☆ 1.6KUpdated Oct 17, 2026
Build and manage Linux containers on Apple silicon Macs with Apple's container CLI. Run each container in its own lightweight virtual machine, and get guidance on images, networking, storage, and translating familiar Docker workflows to this tool.
- Building container images from a Dockerfile
- Running Linux containers on an Apple silicon Mac
- Managing persistent volumes and container networks
sickn33/agentic-awesome-skills☆ 47.9KUpdated Oct 19, 2026
Use Bash on macOS or Linux for file searches, log inspection, text processing, and process checks. Apply command chaining, pipes that pass text between commands, environment variables, and error handling when writing scripts.
- Finding files and searching their contents
- Inspecting logs, processes, and occupied ports
- Extracting and replacing text
davila7/claude-code-templates☆ 32.7KUpdated Oct 18, 2026
Build C++ applications for custom Zoom video sessions on Linux, including bots that run without a display. Get guidance on capturing and supplying raw audio and video, connecting Qt or GTK interfaces, and configuring Docker environments.
- Build a Zoom video session bot that runs in Docker
- Capture and process raw audio and video
- Supply custom media through a virtual camera or microphone
anthropics/knowledge-work-plugins☆ 30.3KUpdated Oct 17, 2026
Organize multi-step research and project work in Continue using Markdown files for plans, findings, and progress. When invoked, the skill reads saved planning context to support resuming work and reviewing earlier decisions.
- Resuming interrupted work in Continue
- Recording findings during research
- Tracking project phases and decisions
OthmanAdi/planning-with-files☆ 27.5KUpdated Oct 18, 2026
Routes requests made under the older lark-minutes name to lark-meeting. This compatibility entry lets existing references use the current skill’s workflow; it does not process meeting tasks itself and requires lark-cli and lark-meeting.
- Keeping an existing configuration that names lark-minutes
- Passing an explicit old-name request to lark-meeting
- Checking the requirements for the compatibility entry
larksuite/cli☆ 17.7KUpdated Oct 16, 2026
Review how evidence can be altered during authorized security exercises on Windows and Linux. Covers logs, timestamps, memory, disk records, and network traces, alongside the signs defenders use to detect manipulation.
- Planning authorized evidence manipulation tests
- Reviewing Windows and Linux forensic artifacts
- Checking detection coverage for altered evidence
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
Guided first-time setup for Minutes — download whisper model, create directories, configure audio input. Use when the user says "set up minutes", "install minutes", "first time setup", "configure minutes", "get started with minutes", "how do I start using minutes", or when verify shows missing components.
The English summary is being prepared. Showing the original description.
silverstein/minutes☆ 1.6KUpdated Oct 17, 2026
Turns one meeting transcript, recording recap or set of raw notes into concise DRAFT minutes returned in the chat as a single Markdown document: header metadata, attendance and apologies, agenda items each with a short neutral summary and outcome, numbered decisions with an owner, numbered action items with owner and due date, open questions, carried-over actions and the next-meeting line, every entry backed by a short verbatim source fragment and every missing fact marked UNKNOWN. Use when the user asks to "write the minutes", "draft minutes from this transcript", "turn these notes into meeting minutes", "produce the minutes of meeting for today's call", "tidy my rough minutes into the standard format" or "prepare the minutes for circulation". Do not use for extracting action items, task lists or per-owner follow-up emails alone, use transcript-to-actions instead. Drafts for human review; never approves, authorises or signs off.
The English summary is being prepared. Showing the original description.
kesslernity/awesome-copilot-agent-skills☆ 8Updated Sep 19, 2026
Investigate Debian Linux issues through service checks, logs, and package tools. Receive repair commands, verification steps, and rollback guidance, with attention to AppArmor security restrictions or firewall settings when relevant.
- Investigating Debian service or package problems
- Checking whether security restrictions affect an issue
- Preparing repair, verification, and rollback steps
github/awesome-copilot☆ 40.2KUpdated Oct 17, 2026