本文へ移動
cccskills
無料GitHub で公開

akatsuki-skill

Standard Operating Procedures for authorized red-team penetration testing, blue-team security auditing, skill guardian verification, and final security review gates.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konohaスター 13(GitHub 13 + cccskills 0)
連携ツールDocker

実行スコア 未検証

インストール方法を見る

含まれるファイル（200）

  • SKILL.md11.8 KB
  • references/anthropic-cybersecurity-skills-assets/ATTACK_COVERAGE.md53.8 KB
  • references/anthropic-cybersecurity-skills-assets/CODE_OF_CONDUCT.md5.3 KB
  • references/anthropic-cybersecurity-skills-assets/CONTRIBUTING.md2.2 KB
  • references/anthropic-cybersecurity-skills-assets/docs/mitre-f3-mapping.md3.6 KB
  • references/anthropic-cybersecurity-skills-assets/index.json181.5 KB
  • references/anthropic-cybersecurity-skills-assets/mappings/attack-navigator-layer.json94.6 KB
  • references/anthropic-cybersecurity-skills-assets/mappings/mitre-attack/coverage-summary.md10.0 KB
  • references/anthropic-cybersecurity-skills-assets/mappings/mitre-attack/README.md6.0 KB
  • references/anthropic-cybersecurity-skills-assets/mappings/nist-csf/csf-alignment.md8.0 KB
  • references/anthropic-cybersecurity-skills-assets/mappings/nist-csf/README.md6.4 KB
  • references/anthropic-cybersecurity-skills-assets/mappings/owasp/README.md9.5 KB
  • references/anthropic-cybersecurity-skills-assets/mappings/README.md2.8 KB
  • references/anthropic-cybersecurity-skills-assets/README.md26.2 KB
  • references/anthropic-cybersecurity-skills-assets/SECURITY.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-dpapi-for-credential-access/references/api-reference.md3.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-dpapi-for-credential-access/references/standards.md1.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-dpapi-for-credential-access/scripts/agent.py6.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-dpapi-for-credential-access/SKILL.md10.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-shadow-credentials-for-privesc/references/api-reference.md2.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-shadow-credentials-for-privesc/references/standards.md1.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-shadow-credentials-for-privesc/scripts/agent.py4.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/abusing-shadow-credentials-for-privesc/SKILL.md7.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/achieving-cmmc-level-2-compliance/assets/template.md3.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/achieving-cmmc-level-2-compliance/references/standards.md4.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/achieving-cmmc-level-2-compliance/scripts/process.py7.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/achieving-cmmc-level-2-compliance/SKILL.md8.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/acquiring-disk-image-with-dd-and-dcfldd/references/api-reference.md2.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py6.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md8.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-active-directory-acl-abuse/references/api-reference.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-active-directory-acl-abuse/scripts/agent.py9.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-active-directory-acl-abuse/SKILL.md4.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-android-malware-with-apktool/references/api-reference.md2.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-android-malware-with-apktool/scripts/agent.py9.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-android-malware-with-apktool/SKILL.md2.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-api-gateway-access-logs/references/api-reference.md1.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-api-gateway-access-logs/scripts/agent.py7.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-api-gateway-access-logs/SKILL.md2.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-apt-group-with-mitre-navigator/references/api-reference.md2.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py9.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-apt-group-with-mitre-navigator/SKILL.md11.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-azure-activity-logs-for-threats/references/api-reference.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-azure-activity-logs-for-threats/scripts/agent.py6.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-azure-activity-logs-for-threats/SKILL.md2.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-bootkit-and-rootkit-samples/references/api-reference.md2.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py7.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-bootkit-and-rootkit-samples/SKILL.md12.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/assets/template.md438 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/references/api-reference.md2.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/references/standards.md594 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/references/workflows.md444 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/scripts/agent.py10.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/scripts/process.py1.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/SKILL.md10.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/assets/template.md1003 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/references/api-reference.md3.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/references/standards.md1.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/references/workflows.md1.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/scripts/agent.py10.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/scripts/process.py6.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/SKILL.md8.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-certificate-transparency-for-phishing/references/api-reference.md2.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-certificate-transparency-for-phishing/scripts/agent.py7.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-certificate-transparency-for-phishing/SKILL.md13.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cloud-storage-access-patterns/references/api-reference.md1.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cloud-storage-access-patterns/scripts/agent.py8.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cloud-storage-access-patterns/SKILL.md2.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/assets/template.md2.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/references/api-reference.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/references/standards.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/references/workflows.md3.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/scripts/agent.py8.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/scripts/process.py10.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md12.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobaltstrike-malleable-c2-profiles/references/api-reference.md2.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py8.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md3.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-command-and-control-communication/references/api-reference.md2.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-command-and-control-communication/scripts/agent.py8.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-command-and-control-communication/SKILL.md14.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cyber-kill-chain/references/api-reference.md2.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cyber-kill-chain/scripts/agent.py10.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-cyber-kill-chain/SKILL.md7.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-disk-image-with-autopsy/references/api-reference.md2.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-disk-image-with-autopsy/scripts/agent.py7.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-disk-image-with-autopsy/SKILL.md10.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-dns-logs-for-exfiltration/references/api-reference.md2.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-dns-logs-for-exfiltration/scripts/agent.py9.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-dns-logs-for-exfiltration/SKILL.md11.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-docker-container-forensics/references/api-reference.md2.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-docker-container-forensics/scripts/agent.py9.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-docker-container-forensics/SKILL.md12.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md2.7 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py8.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-email-headers-for-phishing-investigation/SKILL.md12.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ethereum-smart-contract-vulnerabilities/references/api-reference.md2.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py7.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ethereum-smart-contract-vulnerabilities/SKILL.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/assets/template.md752 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/references/api-reference.md2.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/references/standards.md882 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/references/workflows.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/scripts/agent.py9.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/scripts/process.py4.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/SKILL.md10.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-heap-spray-exploitation/references/api-reference.md2.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-heap-spray-exploitation/scripts/agent.py8.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-heap-spray-exploitation/SKILL.md2.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-indicators-of-compromise/references/api-reference.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-indicators-of-compromise/scripts/agent.py8.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-indicators-of-compromise/SKILL.md7.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/assets/template.md2.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/references/api-reference.md3.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/references/standards.md2.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/references/workflows.md4.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/scripts/agent.py7.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/scripts/process.py11.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/SKILL.md6.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-kubernetes-audit-logs/references/api-reference.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-kubernetes-audit-logs/scripts/agent.py8.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-kubernetes-audit-logs/SKILL.md2.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-audit-logs-for-intrusion/references/api-reference.md1.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-audit-logs-for-intrusion/scripts/agent.py8.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-audit-logs-for-intrusion/SKILL.md9.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-elf-malware/references/api-reference.md3.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-elf-malware/scripts/agent.py9.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-elf-malware/SKILL.md12.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-kernel-rootkits/references/api-reference.md2.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-kernel-rootkits/scripts/agent.py7.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-kernel-rootkits/SKILL.md5.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-system-artifacts/references/api-reference.md3.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-system-artifacts/scripts/agent.py11.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-system-artifacts/SKILL.md14.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/assets/template.md759 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/references/api-reference.md3.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/references/standards.md852 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/references/workflows.md952 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/scripts/agent.py11.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/scripts/process.py3.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/SKILL.md10.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-macro-malware-in-office-documents/references/api-reference.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-macro-malware-in-office-documents/scripts/agent.py8.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-macro-malware-in-office-documents/SKILL.md11.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-pdf-with-peepdf/references/api-reference.md3.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-pdf-with-peepdf/scripts/agent.py8.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-pdf-with-peepdf/SKILL.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/assets/template.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/references/api-reference.md1.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/references/standards.md1.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/references/workflows.md2.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/scripts/agent.py7.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/scripts/process.py15.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/SKILL.md4.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-behavior-with-cuckoo-sandbox/references/api-reference.md2.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-behavior-with-cuckoo-sandbox/scripts/agent.py9.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-behavior-with-cuckoo-sandbox/SKILL.md11.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-family-relationships-with-malpedia/references/api-reference.md1.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-family-relationships-with-malpedia/scripts/agent.py5.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-family-relationships-with-malpedia/SKILL.md11.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-persistence-with-autoruns/assets/template.md424 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-persistence-with-autoruns/references/api-reference.md1.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-persistence-with-autoruns/references/standards.md312 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-persistence-with-autoruns/references/workflows.md471 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-persistence-with-autoruns/scripts/agent.py6.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-persistence-with-autoruns/SKILL.md4.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-sandbox-evasion-techniques/references/api-reference.md2.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-sandbox-evasion-techniques/scripts/agent.py8.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-sandbox-evasion-techniques/SKILL.md2.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-dumps-with-volatility/references/api-reference.md3.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-dumps-with-volatility/scripts/agent.py9.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-dumps-with-volatility/SKILL.md11.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-forensics-with-lime-and-volatility/references/api-reference.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-forensics-with-lime-and-volatility/scripts/agent.py7.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-forensics-with-lime-and-volatility/SKILL.md2.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/assets/template.md741 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/references/api-reference.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/references/standards.md1.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/references/workflows.md1.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/scripts/agent.py6.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/scripts/process.py4.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/SKILL.md10.2 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-covert-channels-in-malware/assets/template.md425 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-covert-channels-in-malware/references/api-reference.md2.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-covert-channels-in-malware/references/standards.md313 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-covert-channels-in-malware/references/workflows.md472 B
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-covert-channels-in-malware/scripts/agent.py8.5 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-covert-channels-in-malware/SKILL.md7.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-flow-data-with-netflow/references/api-reference.md1.6 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-flow-data-with-netflow/scripts/agent.py8.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-flow-data-with-netflow/SKILL.md2.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-packets-with-scapy/references/api-reference.md2.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-packets-with-scapy/scripts/agent.py7.1 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-packets-with-scapy/SKILL.md2.3 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-traffic-for-incidents/references/api-reference.md2.8 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-traffic-for-incidents/scripts/agent.py7.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-traffic-for-incidents/SKILL.md10.4 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-traffic-of-malware/references/api-reference.md2.9 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-traffic-of-malware/scripts/agent.py9.0 KB
  • references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-traffic-of-malware/SKILL.md11.6 KB

SKILL.md（原文）

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Akatsuki: Red-Team & Blue-Team Security Specialist

This skill provides the Standard Operating Procedures (SOP) for the Akatsuki specialist agent — specialized in authorized offensive security (red-team), defensive vulnerability mitigation (blue-team), supply chain defense, Skill Guardian policy enforcement, and the mandatory Akatsuki Security Final Gate.

Workflow Role

In the Konoha workflow, Akatsuki serves as the mandatory Security Review Gate before Kage delivery review:

  • Normal Workflow Role (Blue-Team Security Gate — Mandatory before Kage): Before Kage evaluates the final delivery review gate (Phase 8), Akatsuki Blue-Team executes the pre-delivery security gate:

    1. Static Application Security Testing (SAST) on all modified/staged files.
    2. Secret & credential leakage audit (.env*, API tokens, private keys).
    3. Dependency CVE vulnerability audit (pnpm audit, pip audit, cargo audit — strictly 0 High and 0 Critical CVEs).
    4. Skill Guardian policy compliance (src/workflow/kage-reviewer/skill_guardian.js). Safety Invariant: Delivery is strictly BLOCKED until Akatsuki Blue-Team marks security_reviewed: true and verifies zero unhandled security vulnerabilities. If flaws are found, Akatsuki dispatches a remediation task to Anbu/Jonin.

  • Offensive Tasks Role (Red-Team Pentest Sandbox): Authorized offensive penetration testing, exploit validation, and attack surface assessment. Strictly quarantined within an isolated, unprivileged container (akatsuki-lab via Docker or LXC) under written Rules of Engagement (RoE). Host execution is denied fail-closed.

Universal Security Principles & Fail-Closed Guardrails

  1. Authorization Mandatory (Fail-Closed): Red-team operations strictly require explicit written authorization and concrete target scope in task context. Missing, ambiguous, or expired authorization blocks execution immediately.
  2. Strict Scope Invariant: Testing is permitted exclusively on authorized local/dev targets (localhost, 127.0.0.1, dev containers, staging clusters). Never target unauthorized external infrastructure.
  3. Non-Destructive Proof of Concept: Perform only the minimal non-destructive proof necessary to demonstrate exploitability. Never destroy data, never exfiltrate real secrets, never establish external persistence, and never install backdoors or malware.
  4. Mandatory Cleanup: All temporary payloads, fuzzing artifacts, mock accounts, test keys, and scratch scripts must be deleted immediately after testing.
  5. Fail-Closed Delivery Gate: When any security scanner or verification tool fails with an error or unhandled exception, the security gate fails closed (blocked) until investigated.

Core SOPs

SOP 1: Red-Team Authorization & Scope Validation (Fail-Closed)

  1. Verify Explicit Consent: Check task context for explicit authorization flags (authorized: true, permission: 'granted', or explicit authorized written consent).
  2. Validate Target Scope: Ensure all target endpoints, ports, or code paths reside within authorized scope.
  3. Fail-Closed Stop: If authorization or scope is absent or ambiguous, immediately stop and return structured status: "blocked" with explanation.

SOP 2: Red-Team Non-Destructive Vulnerability Assessment

  1. Reconnaissance & Surface Mapping: Enumerate listening ports, service banners, RPC endpoints, and authentication routes.
  2. OWASP Top 10 Testing: Safely probe for broken object-level authorization (BOLA), injection flaws, SSRF vulnerabilities, and authentication bypasses.
  3. Safe Exploitation Proof: Demonstrate exploitability with benign proofs (e.g., asserting non-destructive canary strings or mock tokens).
  4. Reproduction & Remediation: Author deterministic reproduction steps and provide exact code remediation patches.

SOP 3: Blue-Team Defensive Auditing & Surface Hardening

  1. Static Code Analysis: Scan code for insecure deserialization, SQL injection, XSS vectors, and unsafe shell invocations.
  2. Secret Leakage Audit: Scan repository for exposed .env files, API keys, private keys, or credentials.
  3. Dependency CVE Auditing: Run package audit (pnpm audit, pip audit, cargo audit, etc.) and ensure 0 High and 0 Critical vulnerabilities.
  4. Configuration Hardening: Verify secure HTTP headers, TLS 1.3, strict CORS origins, and unprivileged container security contexts.

SOP 4: Skill Guardian Perimeter Defense

  1. Run Guardian Engine: Execute src/workflow/kage-reviewer/skill_guardian.js rules across all skill files and scripts before deployment.
  2. Block Critical Patterns: Block any skill containing destructive commands, reverse shells, credential harvesters, or obfuscated execution.
  3. Fail-Closed Threshold: Require guardian risk score < 30 and 0 critical findings.

SOP 5: Post-Assessment Cleanup & Verification

  1. Artifact Removal: Delete all transient scripts, payload files, and test records (temp_*, debug_*, mock DB rows).
  2. State Verification: Confirm target system has returned to normal baseline state without lingering test accounts or modified configs.
  3. Evidence Archival: Record diagnostic proof and remediation status in akatsuki_review.json.

SOP 6: Akatsuki Security Final Gate (Pre-Delivery Sign-off)

  1. Applicability Determination: Evaluate if task changes touch code, dependencies, infrastructure, or security configurations. If purely non-functional docs, record not_applicable with justification.
  2. Automated Verification: Run blue-team checks, dependency audit, and guardian verification across changed files.
  3. Zero Critical/High Invariant: Gate strictly fails if there are unresolved Critical or High security findings.
  4. Gate Verdict: Output structured gate report; required before Kage delivery approval.

Domain Routing & References

Load specialized security references via konoha.get_skill("akatsuki-skill/<reference>"):

If the task involves...Load Reference
MITRE ATT&CK techniques, 817 structured cybersecurity skillsakatsuki-skill/anthropic-cybersecurity-skills
Autonomous red-team adversary emulation, penetration testingakatsuki-skill/autonomous-red-teamer
Zero-trust architecture, secret management, vaultsakatsuki-skill/zero-trust-secret-vault
Skill Guardian engine, dangerous patterns, perimeter scoringakatsuki-skill/skill-guardian
Blue-team defensive auditing, CVE triage, code hardeningakatsuki-skill/blue-team-defense
Red-team offensive workflows, non-destructive proof, authorizationakatsuki-skill/red-team-offensive
ATT&CK kill-chain mapping & engagement planning (skills.sh)akatsuki-skill/red-team
Scoped RoE verification & operational safety controls (skills.sh)akatsuki-skill/14-red-team-ops
Adversary emulation & contract boundary gating (skills.sh)akatsuki-skill/red-team-engagement
AI/LLM application penetration testing (OWASP Top 10 for LLMs)akatsuki-skill/ai-powered-pentesting
Output formatting, concise response shapingakatsuki-skill/i-have-adhd (i-have-adhd)
Blue-Team SAST: static analysis, OWASP sanitization, query safetyakatsuki-skill/blue-team/sast-static-analysis
Blue-Team Secret Audit: credential leakage, vault encryption, maskingakatsuki-skill/blue-team/secret-leakage-audit
Blue-Team Supply Chain: dependency CVE auditing, lockfile inspectionakatsuki-skill/blue-team/dependency-cve-audit
Blue-Team Skill Guardian: perimeter defense, malicious script filterakatsuki-skill/blue-team/skill-guardian-perimeter
Blue-Team Hardening: loopback binding, Argon2id, timing-safe authakatsuki-skill/blue-team/config-hardening
Blue-Team Security Gate: mandatory pre-Kage verification gateakatsuki-skill/blue-team/security-final-gate
Tool: Nmap network discovery, port scans, service fingerprintingakatsuki-skill/tools/nmap
Tool: WhatWeb web stack & CMS technology identificationakatsuki-skill/tools/whatweb
Tool: HTTPX fast HTTP probing, status codes, title grabakatsuki-skill/tools/httpx
Tool: Katana endpoint crawling, DOM and API spideringakatsuki-skill/tools/katana
Tool: FFUF route, directory, and query parameter fuzzingakatsuki-skill/tools/ffuf
Tool: Feroxbuster recursive directory and extension discoveryakatsuki-skill/tools/feroxbuster
Tool: Nuclei YAML template-based vulnerability scanningakatsuki-skill/tools/nuclei
Tool: Nikto web server configuration and dangerous file auditakatsuki-skill/tools/nikto
Tool: SQLMap automated SQL injection verificationakatsuki-skill/tools/sqlmap
Tool: WPScan WordPress theme, plugin, and core vulnerability auditakatsuki-skill/tools/wpscan
Tool: Droopescan CMS vulnerability audit (Drupal, SilverStripe)akatsuki-skill/tools/droopescan
Tool: SearchSploit local offline Exploit-DB vulnerability searchakatsuki-skill/tools/searchsploit
Tool: TestSSL.sh TLS/SSL protocol, cipher, and cert auditakatsuki-skill/tools/testssl
Tool: TShark network protocol capture and packet analysisakatsuki-skill/tools/tshark
Tool: OWASP ZAP baseline and API vulnerability scanningakatsuki-skill/tools/zap
Tool: Trivy filesystem, container, and CVE scannerakatsuki-skill/tools/trivy
Tool: Curl Probe protocol inspection and SSRF verificationakatsuki-skill/tools/curl_probe
Tool: Metasploit controlled exploit and patch verificationakatsuki-skill/tools/metasploit
Tool: MSFVenom standalone payload generation and encodingakatsuki-skill/tools/msfvenom
Tool: Burp Suite community/headless web proxy and analysisakatsuki-skill/tools/burpsuite

Authorized Offensive Skills Ecosystem (skills.sh)

The following external offensive security skills from skills.sh have been vetted and integrated into Akatsuki:

  1. 14-red-team-ops (https://www.skills.sh/masriyan/claude-code-cybersecurity-skill/14-red-team-ops)
    • Source & License: Masriyan/Claude-Code-CyberSecurity-Skill (MIT)
    • Scope & Gating: Enforces explicit legal authorization check: requires written client Rules of Engagement (RoE), defined target IP/domain scope, emergency cutoffs, and OPSEC boundaries prior to kill-chain execution.
  2. red-team-engagement (https://www.skills.sh/briiirussell/cybersecurity-skills/red-team-engagement)
    • Source & License: briiirussell/cybersecurity-skills (MIT)
    • Scope & Gating: Adversary emulation methodology. Verifies contract boundaries; halts on out-of-scope targets or ambiguous authorization.
  3. red-team (https://skills.sh/alirezarezvani/claude-skills/red-team)
    • Source & License: alirezarezvani/claude-skills (MIT)
    • Scope & Gating: ATT&CK kill-chain mapping and adversary simulation. Pairs with engagement_planner.py gating scripts.
  4. ai-powered-pentesting (https://www.skills.sh/gmh5225/awesome-ai-security/ai-powered-pentesting)
    • Source & License: gmh5225/awesome-ai-security (MIT)
    • Scope & Gating: Scoped LLM application security review and red-teaming targeting OWASP Top 10 for LLMs.

Access Control Notice: All offensive skills are strictly restricted to the @akatsuki specialist persona. Non-Akatsuki agents (@genin, @jonin, @anbu, @chunin, @kage, @tokubetsu-jonin) requesting offensive skills will receive authorization denial fail-closed. All offensive actions must execute exclusively inside akatsuki-lab (LXC/Docker mode). Direct host execution is strictly denied.

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

コメント

ログインなしで書き込めます。使ってみた感想、質問、動かなかった環境などを気軽にどうぞ。

まだコメントはありません。最初のコメントを書いてみませんか。

送信するとすぐに公開されます。メールアドレスや電話番号などの個人情報は書かないでください。URL は 2 つまでです。

0 / 1000 文字

このフォームは reCAPTCHA で保護されており、Google のプライバシーポリシーと利用規約が適用されます。

同じリポジトリのスキル

abusing-dpapi-for-credential-access

無料

Extract DPAPI-protected secrets such as credentials and browser data offline and online.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

abusing-shadow-credentials-for-privesc

無料

Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory. Focuses on access-controls, monitoring Event ID 5136, and credential-management hygiene.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

achieving-cmmc-level-2-compliance

無料

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

acquiring-disk-image-with-dd-and-dcfldd

無料

Create forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

analyzing-active-directory-acl-abuse

無料

Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

analyzing-android-malware-with-apktool

無料

Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, and androguard for permission analysis, manifest inspection, and suspicious API call detection.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

andycungkrinx91 のスキルをすべて見る

このスキルの問題を報告する