Extract DPAPI-protected secrets such as credentials and browser data offline and online.
日本語の概要は準備中です。原文の説明を表示しています。
Standard Operating Procedures for backend development, bug fixing, DevOps, infrastructure deployment, and security hardening.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
This skill provides the Standard Operating Procedures (SOP) for the Anbu agent — backend logic, bug diagnosis, DevOps, and infrastructure.
In the 8-phase Konoha workflow, Anbu handles the backend portion of Phase 5: execute. After plan (and optionally research) is done, the orchestrator iterates through the plan_tasks enum from plan.md and dispatches tasks to either anbu (backend, databases, CI/CD, infrastructure) or jonin (frontend, UI) depending on the task's domain. Anbu completes its tasks, writes result_anbu.md, and the orchestrator advances to document once all execute tasks are done.
[!CAUTION]
Minimal Safe Changes: Diagnose root cause before fixing. Make minimal safe changes. Validate with dry-runs and tests.
[!NOTE] Tool Usage & Token Preservation: Use
konohaMCP server (find_skill,get_skill) for all skill/instruction discovery. Do NOT callsembletools (search, find_related) for finding or locating skills, assembleis strictly a project code search engine and querying it burns quota tokens. Always usekonohaMCP tools (find_skill,get_skill) for discovering and reading skills and reference documents. NEVER usesemblesearch for skills.
npm or yarn under any circumstances. ALWAYS use pnpm.pnpm audit and pnpm audit fix.localhost, 127.0.0.1, dev containers, local docker-compose stacks, local Kubernetes clusters like minikube/k3s, and user-specified staging endpoints). External/production targets are strictly forbidden without explicit written permission.pentest completed, 0 unhandled exploits, scan completed), document findings with reproduction steps and severity, and provide concrete remediation code.Chart.yaml, values.yaml, templates/, _helpers.tpl).version (chart package) and appVersion (workload application container).helm lint and dry-run template rendering (helm template test-release ./my-chart --debug) before any deployment.runAsNonRoot: true, readOnlyRootFilesystem: true, and zero dropped capability omissions.USER nonroot / USER 1001), use minimal base images (Alpine, distroless, scratch), and drop unnecessary Linux capabilities.HEALTHCHECK and purge package manager caches in the same RUN step (rm -rf /var/cache/apk/*, pnpm store prune).snapshot -i -c -s); write verified flow file (<test-dir>/e2e/flows/*.json).qa_codify; run regression suites via qa_e2e_run only.anbu-skill/qa-automation.Based on the user's request, load the specific reference file using konoha.get_skill("anbu-skill/<reference-name>") (for internal references) or konoha.get_skill("<skill-name>") (for global skills). Never guess implementation details or read files under .agents/skills/ directly.
| If the request involves... | Load this reference |
|---|---|
| QA, E2E, regression, UI bug reproduction, browser testing, flow file, Playwright test | anbu-skill/qa-automation |
| Penetration testing in dev/local environments, vulnerability scanning, security assessment | anbu-skill/anthropic-cybersecurity-skills |
| DevOps, SRE, Terraform, Ansible, Jenkins, Docker, Kubernetes, Linux, Sysadmin, Network Engineering, AWS, GCP, Azure, HuaweiCloud, Tencent, DigitalOcean, Linode, Python, Golang, Rust, Shell script | anbu-skill/devops-engineer |
| Helm charts, Kubernetes packaging, Chart.yaml, values.yaml templating, Helm scaffolding, chart linting | anbu-skill/helm-chart-scaffolding |
| Multi-stage Dockerfiles, optimized container builds, layer caching, Docker security, distroless images | anbu-skill/multi-stage-dockerfile |
| Grafana, Prometheus, monitoring, metrics, observability dashboards | anbu-skill/prometheus-grafana |
| Anthropic Cybersecurity Skills, security log analysis, threat hunting, defensive forensics, analytical hardening | anbu-skill/anthropic-cybersecurity-skills |
| Security auditing, DevSecOps, OWASP, penetration test remediation, defensive hardening | devsecops-engineer |
| RabbitMQ, Kafka, Redis, Nginx, HAProxy, Varnish, reverse proxies, caching, load balancing, distributed systems | anbu-skill/distributed-systems |
| AI prompt engineering, system prompt design, LLM optimization, prompt testing | anbu-skill/prompt-engineer |
| Skills creator, creating or modifying AI agent skills, SKILL.md specification | skill-creator |
| PHP, Ruby, C++, Node.js, Express.js, GraphQL, BytePlus, modern backend APIs and full-stack systems | modern-full-stack |
| Laravel backend, API development, architecture, testing | anbu-skill/laravel-specialist |
| WordPress backend, CMS development, custom themes/plugins | anbu-skill/wordpress-pro |
| Magento module development, backend architecture, e-commerce API | anbu-skill/magento-module-developer |
| Final response shaping, ADHD-friendly concise output, action-first answers | anbu-skill/i-have-adhd (i-have-adhd) |
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Extract DPAPI-protected secrets such as credentials and browser data offline and online.
日本語の概要は準備中です。原文の説明を表示しています。
Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory. Focuses on access-controls, monitoring Event ID 5136, and credential-management hygiene.
日本語の概要は準備中です。原文の説明を表示しています。
Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.
日本語の概要は準備中です。原文の説明を表示しています。
Create forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.
日本語の概要は準備中です。原文の説明を表示しています。
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
日本語の概要は準備中です。原文の説明を表示しています。
Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, and androguard for permission analysis, manifest inspection, and suspicious API call detection.
日本語の概要は準備中です。原文の説明を表示しています。