Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing eradication procedures. Covers the full lifecycle from detection through containment, analysis, removal, and recovery. Activates for requests involving malware response, malware eradication, trojan removal, worm containment, malware triage, or infected endpoint remediation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
micsapp/micstec-skills☆ 42026년 3월 20일 업데이트
Designs, reconciles, and reviews an end-to-end Drydock program for safely staging agent runtimes: immutable worktree provenance, disposable VM containment, typed effect brokerage, global body accounting, resurrection, subscription-capacity economics, context compaction, operator control, evidence, and promotion. Use when several Drydock contracts must compose into one architecture, implementation hypertree, diagram set, or release plan. NOT for launching Port Daddy, running an untrusted subject, replacing focused containment/resurrection/capacity audits, or treating a design packet as runtime authority.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Manages agent isolation levels and resource boundaries. Specifies concrete controls and the evidence needed to assess their boundaries. Activate on 'isolation level', 'agent isolation', 'resource boundaries', 'sandboxing', 'agent containment'. NOT for permission validation (use dag-permission-validator) or runtime enforcement (use dag-scope-enforcer).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure. Activates for requests involving cloud incident response, AWS security incident, Azure compromise, GCP breach, cloud forensics, or cloud identity compromise.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aniket2348823/Vul-Agent☆ 22026년 6월 9일 업데이트
Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication, and recovery phases with specific SIEM queries, isolation procedures, and decision trees. Use when SOC teams need formalized response procedures for ransomware incidents aligned to NIST SP 800-61 and MITRE ATT&CK ransomware techniques.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aniket2348823/Vul-Agent☆ 22026년 6월 9일 업데이트
Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing eradication procedures. Covers the full lifecycle from detection through containment, analysis, removal, and recovery. Activates for requests involving malware response, malware eradication, trojan removal, worm containment, malware triage, or infected endpoint remediation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aniket2348823/Vul-Agent☆ 22026년 6월 9일 업데이트
제조 현장의 규격 부적합품에 대해 격리, 원인 분석, 처분 검토, 시정·예방 조치의 효과 확인을 정리하고 관리도 해석과 공급업체 품질 개선을 지원합니다.
- 검사에서 발견한 부적합 문제 조사
- 근본 원인 분석 방법 선택
- 시정 조치 계획과 효과 확인
affaan-m/ECC☆ 28.4만2026년 10월 20일 업데이트
Investigate process hollowing, where malicious code replaces a legitimate process in memory. Compare memory with disk files, examine process relationships, and correlate network activity to document suspicious processes and guide containment.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating process injection alerts from EDR
- Examining suspicious behavior in legitimate Windows processes
- Finding threats that run in memory
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Build real-time detection for ransomware encryption by combining changes in data randomness with file modification rates, renames, and process activity. Define behavioral scores and response thresholds, then check detection accuracy and monitoring overhead.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Building ransomware monitoring for endpoints and file servers
- Tuning detection thresholds to reduce false positives
- Investigating processes suspected of encrypting files
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Investigate suspected email account takeovers by examining audit logs, sign-ins, inbox rules, and app permissions. Identify suspicious forwarding, unlikely travel between sign-ins, and unusual access, then summarize findings and recommended containment actions in a severity-rated report.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating suspected business email compromise
- Checking for suspicious external forwarding rules
- Reviewing unusual sign-ins and app permissions
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Set up and operate Amazon GuardDuty to detect threats in AWS. Configure protection features, centralize findings across accounts, investigate suspicious activity, and build automated responses with EventBridge and Lambda, including containment of potentially compromised resources.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Setting up threat detection for AWS accounts
- Investigating credential abuse and compromised instances
- Automating responses to high-severity findings
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Investigate lateral movement, where attackers expand access across Azure identities and tenants. Correlate audit logs and unusual sign-ins, build Microsoft Sentinel detection queries, and report affected identities with recommended containment actions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating suspicious Azure sign-ins
- Building Microsoft Sentinel detection rules
- Reviewing suspicious OAuth app consent
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Investigate compromised credentials across AWS, Azure, and GCP by correlating security alerts and audit logs. Examines unusual API activity and suspicious sign-ins, helps assess the affected scope, and guides containment actions such as disabling keys and revoking sessions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigate cloud API activity from unfamiliar locations
- Assess exposure after a credential leak notification
- Correlate suspicious sign-ins across cloud providers
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Create reusable procedures for responding to security incidents, from detection and containment to recovery. Define decision points, responsibilities, escalation rules, and workflows for security automation platforms so teams can follow a consistent response process.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Establishing an incident response program
- Documenting phishing or ransomware response procedures
- Designing automated security response workflows
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Create Mermaid diagrams from code relationships parsed by Trailmark. Visualize function calls, class inheritance, module dependencies, class members, complexity hotspots, and paths from inputs to sensitive functions, with adjustable focus, depth, and layout.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Mapping function calls around a selected function
- Visualizing class inheritance and members
- Drawing module dependency maps
trailofbits/skills☆ 7.7천2026년 10월 20일 업데이트
Design and review how a system is divided into modules, cohesive parts with clear responsibilities. Evaluate data ownership, communication rules, dependencies, and failure handling, and decide when to split or merge parts without assuming a particular technology.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Define responsibilities and boundaries for a new module
- Review dependencies between system modules
- Clarify data ownership and communication rules
tech-leads-club/agent-skills☆ 7.1천2026년 10월 17일 업데이트
Diagnostic-only test suite auditor. Classifies repo type, maps against 7-layer testing taxonomy (git hooks → static → unit → integration → system → E2E → acceptance), runs deterministic quality gates (coverage, mutation, CRAP, architecture, escape-scan), builds RTM / personas / journeys traceability, produces TEST_AUDIT.md, updates tests/TESTING.md, and mandatorily hands off to implement-tests when gaps are found. Use when auditing test quality, finding test gaps, or running the full 7-layer sweep. Trigger with "audit tests", "find gaps", "test audit", "check test quality", "full sweep", "7-layer audit", "rtm check".
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
jeremylongshore/tons-of-skills-marketplace☆ 2.9천2026년 10월 19일 업데이트
Diagnose and manage an Algolia-backed search incident with evidence, containment, and reversible recovery. Use when users see failed, stale, slow, or irrelevant search results. Trigger with "Algolia incident", "search outage", or "Algolia degraded".
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
jeremylongshore/tons-of-skills-marketplace☆ 2.9천2026년 10월 19일 업데이트
Runs a security incident from detection to closure — triage, containment, investigation, communication, and the review afterward. Use this when a compromise is suspected or confirmed, when preparing an incident response plan or running an exercise, when deciding whether something is an incident, or when a breach may trigger notification obligations.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
cbrock84/headcount☆ 2.1천2026년 10월 19일 업데이트
Add and review preconditions on operations that delete, overwrite, rewrite history, or resolve a caller-supplied name to a filesystem path — refusing instead of warning, placing the guard ahead of the first mutation, structural classification rather than string-prefix matching, name validation plus resolved-path containment as two independent checks, why a guard on the destructive path is invisible to the dry-run, and mutation-testing each half separately. Use when writing or reviewing a `--rebuild`/`--reset`/`--purge` command, a bulk delete, a history rewrite, an `rm -rf`-shaped step, or any code that turns an argument into a file path.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
kajisho5/ffmpeg-skill☆ 2천2026년 10월 18일 업데이트
Use when asked 写8D报告, 客户投诉8D, 质量问题8D, 客诉回复报告, 8D 怎么写, 根本原因分析报告, or write an 8D problem-solving report for a customer complaint or internal quality issue in a Chinese factory. Produces a bilingual (Chinese and English) 8D report from D0 to D8 with the problem described by 5W2H, dated containment actions and suspect-stock quantities, root cause for both occurrence and escape (流出) with 5 Why and fishbone evidence, verified corrective actions, prevention through updated PFMEA, control plan and SOP, and closure criteria, in the format customers expect.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
mohitagw15856/pm-claude-skills☆ 1.5천2026년 10월 20일 업데이트
Use to review a generated HTML deck or single-page artifact for visual quality and structural correctness. Especially good at catching CSS specificity bugs where slide-modifier classes (.divider, .center, .q, .flow etc.) accidentally override the base .slide{display:none} and cause one slide to stack on top of every other. Also catches missing keyboard navigation, bullet-dump / wall-of-text failure modes, broken self-containment (external link/script/img). Patches the file in place; never changes the original content (slide text, numbers, named entities are the author's work, not yours).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
yuezhiai/jonex☆ 1.4천2026년 10월 10일 업데이트
Guides MongoDB users through implementing and optimizing Atlas Search (full-text), Vector Search (semantic), and Hybrid Search solutions. Use this skill when users need to build search functionality for text-based queries (autocomplete, fuzzy matching, faceted search), semantic similarity (embeddings, RAG applications), or combined approaches. Also use when users need text containment, substring matching ('contains', 'includes', 'appears in'), case-insensitive or multi-field text search, or filtering across many fields with variable combinations. Provides workflows for selecting the right search type, creating indexes, constructing queries, and optimizing performance using the MongoDB MCP server.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
fcakyon/claude-codex-settings☆ 1.2천2026년 10월 20일 업데이트
Handle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery processes. Use when responding to security events or building incident response capabilities.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
BagelHole/DevOps-Security-Agent-Skills☆ 1.2천2026년 5월 22일 업데이트