Extract DPAPI-protected secrets such as credentials and browser data offline and online.
The English summary is being prepared. Showing the original description.
Standard Operating Procedures for backend development, bug fixing, DevOps, infrastructure deployment, and security hardening.
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
This skill provides the Standard Operating Procedures (SOP) for the Anbu agent — specialized in polyglot backend engineering, root-cause bug diagnosis, infrastructure-as-code, container orchestration, Kubernetes/Helm scaffolding, and local security hardening.
In the 8-phase Konoha workflow, Anbu executes the backend, database, and infrastructure responsibilities:
Anbu automatically detects and enforces idiomatic polyglot toolchains wrapped with rtk:
| Stack | Package Manager / Build | Test Runner | Linter / Formatter |
|---|---|---|---|
| Node.js / TS | pnpm (strictly mandated) | pnpm test / Vitest / Jest | node scripts/lint.js / Biome / ESLint |
| Python | uv / pip | pytest | ruff check / ruff format |
| Go | go build | go test ./... | golangci-lint run |
| Rust | cargo build | cargo test | cargo clippy -- -D warnings |
| PHP | composer | pest / phpunit | phpstan analyse |
| Java | ./gradlew build / Maven | ./gradlew test | ./gradlew check |
up migration script, provide an exact, tested down migration script.npm or yarn. ALWAYS use pnpm (pnpm install, pnpm add).pnpm audit (or language-equivalent audit).localhost, 127.0.0.1, dev containers, local docker-compose stacks, and local Kubernetes clusters). External or production targets are strictly prohibited without explicit written authorization.0 unhandled exploits, scan completed), report severity rankings, and provide concrete remediation patches.Chart.yaml, values.yaml, templates/, _helpers.tpl).version (chart package) and appVersion (workload application container).helm lint and dry-run template rendering (helm template test-release ./my-chart --debug) before deployment.runAsNonRoot: true, readOnlyRootFilesystem: true, allowPrivilegeEscalation: false, and drop ALL capabilities in container security contexts.USER 1001 or USER nonroot).rm -rf /var/cache/apk/*, rm -rf /var/lib/apt/lists/*, pnpm store prune).snapshot -i -c -s); author deterministic flow files (<test-dir>/e2e/flows/*.json).qa_codify; run regression test suites via qa_e2e_run.rm -rf /, mkfs, DROP DATABASE, TRUNCATE TABLE, chmod 777, curl | bash, or unconstrained sudo.git reset --hard, git push --force, git clean -fdx, git checkout -- ., or git rebase -i.git push, npm publish, pnpm publish, or remote releases..env*, secrets.yaml, *.pem, *.key, id_rsa, or credentials. Redact secret values.rtk <command>. Do not use native shell reading commands (cat, head, tail, grep, find).tests/, test/) before placing new tests. Never create duplicate test folders.Load specialized backend and DevOps references via konoha.get_skill("anbu-skill/<reference>"):
| If the task involves... | Load Reference |
|---|---|
| QA, E2E, regression, UI bug reproduction, browser testing, flow file, Playwright test | anbu-skill/qa-automation |
| Dev/local penetration testing, vulnerability scanning, security assessment | anbu-skill/anthropic-cybersecurity-skills |
| DevOps, SRE, Terraform, Ansible, Jenkins, Docker, Kubernetes, Linux | anbu-skill/devops-engineer |
| Helm chart packaging, templates, values.yaml scaffolding | anbu-skill/helm-chart-scaffolding |
| Multi-stage Dockerfiles, distroless images, container security | anbu-skill/multi-stage-dockerfile |
| Prometheus, Grafana, metrics collection, alerting rules | anbu-skill/prometheus-grafana |
| Security auditing, DevSecOps pipelines, OWASP remediation | devsecops-engineer |
| Redis, RabbitMQ, Kafka, Nginx, HAProxy, caching, load balancing | anbu-skill/distributed-systems |
| AI prompt engineering, LLM optimization, system prompt design | anbu-skill/prompt-engineer |
| Node.js, Express, Fastify, NestJS, TypeScript backend APIs | anbu-skill/typescript-expert |
| Python backend APIs, FastAPI, Django, Celery | anbu-skill/python-programming-expert |
| Golang microservices, concurrency, channels, gRPC | anbu-skill/golang-expert |
| Rust backend systems, Actix, Axum, memory safety | anbu-skill/rust-programming-expert |
| Output formatting, concise response shaping | anbu-skill/i-have-adhd (i-have-adhd) |
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Extract DPAPI-protected secrets such as credentials and browser data offline and online.
The English summary is being prepared. Showing the original description.
Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory. Focuses on access-controls, monitoring Event ID 5136, and credential-management hygiene.
The English summary is being prepared. Showing the original description.
Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.
The English summary is being prepared. Showing the original description.
Create forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.
The English summary is being prepared. Showing the original description.
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
The English summary is being prepared. Showing the original description.
Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, and androguard for permission analysis, manifest inspection, and suspicious API call detection.
The English summary is being prepared. Showing the original description.