Coordinate containment, eradication, and recovery for an authorized incident. Preserve evidence, communicate facts, and avoid destructive actions without approval.
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
Use this skill only with explicit written authorization for a named scope (systems, environments, and time window). If authorization is missing, expired, or the request is for someone else's systems, stop.
This skill is defensive and owner-authorized. It does not authorize offensive cyber operations.
Wipe systems before evidence capture unless imminent ransomware spread is approved
Blame individuals in the working notes; stick to systems and facts
Reuse attacker tooling from the incident as a 'test'
Do not produce exploit payloads, malware, or attack procedures.
Load this skill from /cc-security when the Task Card domain is security-incident-response.
Example prompts:
P1: suspected token theft on api-prod. Draft containment and evidence steps for the IR commander.After containment, write the lessons-learned outline and the regression tests we should add./cc-security (CCEP command security)security (not this id)security-reviewerNo reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Use when adding monitoring, metrics, logging, or tracing to Spring AI or LLM integration code. Covers token tracking, latency measurement, cost estimation, and prompt/response logging. Use when user mentions AI monitoring, token costs, or LLM observability.
The English summary is being prepared. Showing the original description.
Provides expert knowledge for building modern native Android apps using Kotlin, Jetpack Compose, Material Design 3, MVI architecture, Hilt dependency injection, and Media3/ExoPlayer.
The English summary is being prepared. Showing the original description.
Design, implement, review, and audit Android Jetpack Compose UI/UX for phone interfaces. Use when a request concerns concrete Compose layout, components, interaction, accessibility, or visual behavior. Do not activate for framework or dependency presence alone; non-UI Android work is excluded.
The English summary is being prepared. Showing the original description.
Provides expert knowledge for designing, implementing, and managing REST API versioning strategies with deprecation workflows.
The English summary is being prepared. Showing the original description.
Provides expert knowledge for building Astro 5+ sites with Islands Architecture, Content Collections, TypeScript, and performance-first rendering strategies.
The English summary is being prepared. Showing the original description.
Audits token storage mechanisms to prevent XSS-based JWT theft.
The English summary is being prepared. Showing the original description.