Investigate compromised credentials across AWS, Azure, and GCP by correlating security alerts and audit logs. Examines unusual API activity and suspicious sign-ins, helps assess the affected scope, and guides containment actions such as disabling keys and revoking sessions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigate cloud API activity from unfamiliar locations
- Assess exposure after a credential leak notification
- Correlate suspicious sign-ins across cloud providers
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Examine Windows and Active Directory logs for attempts to extract passwords and other credentials. Identify suspicious memory access and database exports, correlate events with user and host context, and produce findings with severity ratings and detection queries.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating alerts about suspicious LSASS access
- Finding signs of SAM or NTDS.dit extraction
- Creating detection queries for Splunk or Elastic
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Investigate attacks that make legitimate Windows applications load malicious DLL files. This skill examines loading events, digital signatures, file hashes, and unusual locations, then checks process behavior to document suspicious cases and guide remediation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating alerts about unsigned DLL files
- Hunting for persistent threats using legitimate applications
- Checking suspicious DLL loading paths
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Detect unauthorized cryptocurrency mining in cloud workloads by combining billing changes, CPU usage, mining pool connections, and process alerts. Follow workflows to preserve evidence, isolate affected resources, and trace how attackers gained access.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating sudden cloud billing increases
- Responding to GuardDuty cryptocurrency alerts
- Checking containers for unauthorized mining processes
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Deploy Suricata to detect suspicious network traffic or block it inline. Configure protocol inspection, detection rules, and structured EVE JSON logs, then connect logs to analysis platforms and check packet drops and alert quality during operation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Deploying network intrusion monitoring
- Configuring inline blocking of malicious traffic
- Adding custom detection rules and reducing noisy alerts
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Set up host-based intrusion detection to monitor changes on Windows and Linux endpoints. Configure Wazuh agents, file integrity checks, registry monitoring, alert rules, and automated responses, with guidance on exclusions and centralized security monitoring.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Deploying Wazuh agents on Windows and Linux
- Monitoring critical files and registry changes
- Planning change detection for compliance requirements
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Build normal traffic profiles for industrial control networks and identify unusual connections, polling intervals, and protocol operations. Use machine learning and process records to investigate deviations and produce anomaly reports with severity levels.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Establishing normal traffic profiles for industrial networks
- Detecting unusual connections and polling intervals
- Investigating Nozomi Guardian or Dragos alerts
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Build automated pipelines that collect threat indicators, such as malicious IP addresses and file hashes, from multiple feeds. Standardize formats, remove duplicates, assess confidence, and distribute indicators to security monitoring systems for matching and alerts.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Automating threat feed ingestion
- Standardizing and deduplicating threat indicators
- Distributing indicators to multiple monitoring systems
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Build security detection rules in Splunk using SPL, its search language. Use examples for suspicious logins, network traffic, and PowerShell activity to develop searches, add context and severity, test historical logs, and measure false alerts.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Creating rules to detect suspicious login activity
- Detecting large outbound transfers and access to multiple hosts
- Testing detection rules against historical logs
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Build dashboards and reports for security operations teams using incident and alert data. Track detection and resolution times, false alarms, analyst workload, and detection coverage to assess operational trends and the effects of improvement initiatives.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Preparing monthly or quarterly security operations reports
- Reviewing analyst workload and shift staffing
- Comparing performance before and after tool adoption
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Monitor public certificate issuance records to find suspected phishing domains, brand lookalikes, and unauthorized certificates. Use crt.sh for historical searches and Certstream for live alerts, then summarize suspicious findings and detection reasons in a report.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Monitor domains that resemble a company brand
- Investigate certificate issuance history
- Discover subdomains in public certificate records
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Investigate suspicious IP addresses, domains, URLs, file hashes, and email artifacts using multiple threat intelligence sources. Assess confidence that each indicator is malicious, check links to known campaigns, and document evidence for blocking, monitoring, or allowing it.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Triaging indicators from phishing emails
- Investigating suspicious IP addresses and URLs in alerts
- Assessing bulk indicators before adding them to blocklists
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Configure OMX alerts for session events through Discord, Telegram, Slack, OpenClaw, or custom integrations. Choose notification events, adjust detail and idle intervals, and check configuration validity and delivery with the required tests.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Sending session completion alerts to Discord or Slack
- Receiving requests for input through Telegram
- Adjusting notification detail and idle cooldowns
Yeachan-Heo/oh-my-codex☆ 3.4만2026년 10월 20일 업데이트
Review sales opportunities for warning signs such as inactivity, slipping close dates, contact changes, and renewal windows. Receive a short digest of triggered alerts, supporting evidence, and suggested actions, organized by what needs attention today or this week.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Finding sales opportunities with no recent activity
- Checking approaching or postponed close dates
- Spotting contact risks and competitor mentions
anthropics/knowledge-work-plugins☆ 3.1만2026년 10월 20일 업데이트
Turn an electronics or IoT idea into a working breadboard prototype. Get board and software recommendations, a plan for viewing sensor readings, and time and cost ranges tailored to experience, budget, and location.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Choosing a board and development tools for a first electronics project
- Planning phone access to sensor readings and alerts
- Estimating prototype costs and build time
alirezarezvani/claude-skills☆ 2.8만2026년 8월 30일 업데이트
Search Google SecOps events for threats that have not triggered alerts. Test attack hypotheses, check historical records for compromise indicators, and examine unusual activity, then document findings and add them to relevant security cases.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Test a threat hypothesis based on an attack technique
- Check historical events for newly disclosed compromise indicators
- Investigate rare program executions and network destinations
google/skills☆ 2.1만2026년 10월 21일 업데이트
Review unresolved Plain support tickets for missed response or resolution deadlines, VIP accounts, and serious problems. Route qualifying tickets to the responsible team, create linked Linear issues for engineering work, and post internal Slack alerts.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Check unresolved tickets for missed service deadlines
- Route VIP requests and serious incidents
- Create linked Linear issues for engineering
kortix-ai/suna☆ 2만2026년 10월 20일 업데이트
Monitor a data warehouse for stale tables, unusual row counts, column changes, and failed loads. Receive alerts with evidence and likely causes, plus GitHub issues for human review, while warehouse data remains unchanged.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Check warehouse health every hour
- Investigate delayed table updates
- Detect unusual row counts or column changes
kortix-ai/suna☆ 2만2026년 10월 20일 업데이트
Set up Sentry error tracking, investigate production failures, and prioritize issues by user impact. Configure useful alerts and analyze performance traces, which show how time is spent across application operations and services.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Setting up application error tracking
- Investigating production errors
- Prioritizing issues by user impact
RightNow-AI/openfang☆ 1.8만2026년 7월 2일 업데이트
Helps organize Slack channels, automate routine tasks, and build team integrations. Covers scheduled messages, alerts, approval workflows, and interactive messages using Workflow Builder and the Slack API, which lets programs work with Slack.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Organizing channels by team or project
- Sending deployment and monitoring alerts to Slack
- Building form and approval workflows
RightNow-AI/openfang☆ 1.8만2026년 7월 2일 업데이트
Create slides for safety reviews, risk discussions, incident retrospectives, or security exercises. Warning stripes, three-level cards, status alerts, policy code blocks, checklists, and stacked bar charts provide a visual structure for the presentation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Preparing an incident retrospective presentation
- Presenting risks in three levels
- Sharing findings from simulated security attacks
nexu-io/html-anything☆ 9.2천2026년 10월 13일 업데이트
Use gog to inspect Google AdSense accounts, ad units, sites, payments, alerts, and policy issues. Generate AdSense reports and retrieve details about ad clients and channels to review advertising operations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Generating AdSense reports
- Reviewing account payments
- Checking alerts and policy issues
openclaw/gogcli☆ 8.5천2026년 10월 20일 업데이트
Integrate Birdeye API data to track token prices, charts, holders, trades, and wallet portfolios. Supports profit and loss analysis, token risk checks, and live price or large-trade streams, with access depending on the service plan.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Retrieving token prices and candlestick chart data
- Finding newly listed and trending tokens
- Analyzing wallet portfolios and profit or loss
internet-court/internet-court-skill☆ 6.8천2026년 8월 20일 업데이트
Build failure handling into n8n workflows with separate error paths, retries, alerts, and clear API responses. Use it for webhooks and unattended jobs to make failures visible and return status codes that explain what went wrong.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Add error responses to a webhook API
- Receive alerts when scheduled jobs fail
- Retry temporary external service failures
czlonkowski/n8n-skills☆ 6.5천2026년 10월 16일 업데이트