Skill Catalog
Browse 5,478 curated AI agent skills. No account needed.
Idea Discovery Robot
Workflow 1 adaptation for robotics and embodied AI. Orchestrates robotics-aware literature survey, idea generation, novelty check, and critical review to go from a broad robotics direction to benchmark-grounded, simulation-first ideas. Use when user says \"robotics idea discovery\", \"机器人找idea\", \"embodied AI idea\", \"机器人方向探索\", \"sim2real 选题\", or wants ideas for manipulation, locomotion, navigation, drones, humanoids, or general robot learning.
by wanshuiyin/Auto-claude-code-research-in-sleep / skills/skills-codex-gemini-review/idea-discovery-robot
Idea Discovery Robot
Workflow 1 adaptation for robotics and embodied AI. Orchestrates robotics-aware literature survey, idea generation, novelty check, and critical review to go from a broad robotics direction to benchmark-grounded, simulation-first ideas. Use when user says \"robotics idea discovery\", \"机器人找idea\", \"embodied AI idea\", \"机器人方向探索\", \"sim2real 选题\", or wants ideas for manipulation, locomotion, navigation, drones, humanoids, or general robot learning.
by wanshuiyin/Auto-claude-code-research-in-sleep / skills/skills-codex/idea-discovery-robot
Idea Generator mode instructions
Brainstorm and develop new application ideas through fun, interactive questioning until ready for specification creation.
by github/awesome-copilot / agents/simple-app-idea-generator.agent.md
Ideal Customer Profile
Identify the Ideal Customer Profile (ICP) from research data with demographics, behaviors, JTBD, and needs. Use when defining your ICP, analyzing PMF survey data, or understanding who your best customers are.
by phuryn/pm-skills / pm-go-to-market/skills/ideal-customer-profile
Idea Refine
Refines raw ideas into sharp, actionable concepts through structured divergent and convergent thinking. Use when an idea is still vague, when you need to stress-test assumptions before committing to a plan, or when you want to expand options before converging on one. Triggers on "ideate", "refine this idea", or "stress-test my plan".
by addyosmani/agent-skills / skills/idea-refine
Identify Assumptions Existing
Identify risky assumptions for a feature idea in an existing product across Value, Usability, Viability, and Feasibility. Uses multi-perspective devil's advocate thinking. Use when stress-testing a feature idea, doing risk assessment, or preparing for assumption mapping.
by phuryn/pm-skills / pm-product-discovery/skills/identify-assumptions-existing
Identify Assumptions New
Identify risky assumptions for a new product idea across 8 risk categories including Go-to-Market, Strategy, and Team. Use when evaluating startup risks, assessing a new product concept, or mapping assumptions for a new venture.
by phuryn/pm-skills / pm-product-discovery/skills/identify-assumptions-new
Ignav
Fast REST API flight search via ignav.com. Cash prices, booking links, market selection for price arbitrage. Include in every flight search alongside Duffel and other sources.
by borski/travel-hacking-toolkit / plugins/travel-hacking-toolkit/skills/ignav
Ima Copilot
Installs, troubleshoots, and personalizes the official Tencent IMA skill (a wrapper layer that orchestrates upstream ima-skill, not a replacement). Use when the user mentions IMA, 腾讯 IMA, ima.qq.com, ima-skill, installing or configuring ima-skill, IMA API key / credentials, searching across IMA knowledge bases, 知识库搜索, 笔记搜索, fan-out search with preferred KBs / priority boosting, or wants to diagnose, repair, or personalize an ima-skill install. Also trigger on the missing-YAML-frontmatter bug in ima-skill submodule SKILL.md files and errors like "Skipped loading skill(s) due to invalid SKILL.md".
by daymade/claude-code-skills / ima-copilot
Image
When the user wants to create, generate, edit, or optimize images for marketing — blog heroes, social graphics, product mockups, profile banners, listing visuals, or brand assets. Also use when the user mentions 'AI image generation,' 'generate an image,' 'create a graphic,' 'product mockup,' 'hero image,' 'social media graphic,' 'banner image,' 'cover photo,' 'profile banner,' 'listing screenshot,' 'Flux,' 'Flux Kontext,' 'Midjourney,' 'DALL-E,' 'GPT Image,' 'ChatGPT Images,' 'Ideogram,' 'Gemini image,' 'Nano Banana,' 'Recraft,' 'Stable Diffusion,' 'Canva,' 'Figma,' 'image optimization,' 'compress images,' 'WebP,' or 'OG image.' Use this for general-purpose marketing image creation and optimization. For paid ad image creative and platform-specific ad specs, see ad-creative. For video production, see video.
by coreyhaines31/marketingskills / skills/image
Image Enhancer
Improves the quality of images, especially screenshots, by enhancing resolution, sharpness, and clarity. Perfect for preparing images for presentations, documentation, or social media posts.
by davepoon/buildwithclaude / plugins/all-skills/skills/image-enhancer
Imagegen
Use when the user asks to generate or edit images via the OpenAI Image API (for example: generate image, edit/inpaint/mask, background removal or replacement, transparent background, product shots, concept art, covers, or batch variants); run the bundled CLI (`scripts/image_gen.py`) and require `OPENAI_API_KEY` for live calls.
by foryourhealth111-pixel/Vibe-Skills / bundled/skills/imagegen
Image Generation
Create effective AI image generation prompts for DALL-E, Midjourney, and Stable Diffusion. Generate prompts for various styles and use cases.
by claude-office-skills/skills / image-generation
Image Generation
Use this skill when the user requests to generate, create, imagine, or visualize images including characters, scenes, products, or any visual content. Supports structured prompts and reference images for guided generation.
by bytedance/deer-flow / skills/public/image-generation
Imagegen Frontend Mobile
Elite mobile app image-generation skill for creating premium, app-native screen concepts and flows. Designed for iOS, Android, and cross-platform mobile products. Prioritizes clean hierarchy, comfortably readable text, strong multi-screen consistency, controlled color palettes, non-generic creative direction, textured surfaces, image-led composition, tasteful custom iconography, and clean phone mockup framing. By default, screens should be shown inside a subtle premium iPhone or similar phone mockup with a visible frame, while the main focus stays on the app content itself. This skill generates images only. It does not write code.
by Leonxlnx/taste-skill / skills/imagegen-frontend-mobile
Imagegen Frontend Web
Elite frontend image-direction skill for generating premium, conversion-aware website design references. CRITICAL OUTPUT RULE — generate ONE separate horizontal image FOR EVERY section. A landing page with 8 sections produces 8 images. Never compress multiple sections into one image. Enforces composition variety (not always left-text / right-image), background-image freedom, varied CTAs, varied hero scales (giant / mid / mini minimalist), narrative concept spine, second-read moments, and a single consistent palette across all images. Optimized for landing pages, marketing sites, and product comps that developers or coding models can accurately recreate.
by Leonxlnx/taste-skill / skills/imagegen-frontend-web
Image Manipulation Image Magick
Process and manipulate images using ImageMagick. Supports resizing, format conversion, batch processing, and retrieving image metadata. Use when working with images, creating thumbnails, resizing wallpapers, or performing batch image operations.
by github/awesome-copilot / skills/image-manipulation-image-magick
Imagen
Generate images using Google Gemini's image generation capabilities. Use this skill when the user needs to create, generate, or produce images for any purpose including UI mockups, icons, illustrations, diagrams, concept art, placeholder images, or visual representations.
by sanjay3290/ai-skills / skills/imagen
Image To Code
Elite website image-to-code skill for Codex. For visually important web tasks, it must first generate the design image(s) itself, deeply analyze them, then implement the website to match them as closely as possible. In Codex, it must prefer large, readable, section-specific images instead of tiny compressed boards, generate fresh standalone images for sections or detail views instead of cropping old ones, avoid lazy under-generation, avoid cards-inside-cards-inside-cards UI, and keep the hero clean, spacious, readable, and visible on a small laptop.
by Leonxlnx/taste-skill / skills/image-to-code-skill
Imaging Data Commons
Query and download public cancer imaging data from NCI Imaging Data Commons using idc-index. Use for accessing large-scale radiology (CT, MR, PET) and pathology datasets for AI training or research. No authentication required. Query by metadata, visualize in browser, check licenses.
by K-Dense-AI/scientific-agent-skills / scientific-skills/imaging-data-commons
Imaging Data Commons
Query and download public cancer imaging data from NCI Imaging Data Commons using idc-index. Use for accessing large-scale radiology (CT, MR, PET) and pathology datasets for AI training or research. No authentication required. Query by metadata, visualize in browser, check licenses.
by foryourhealth111-pixel/Vibe-Skills / bundled/skills/imaging-data-commons
Imaging Data Commons
Query and download public cancer imaging data from NCI Imaging Data Commons using idc-index. Use for accessing large-scale radiology (CT, MR, PET) and pathology datasets for AI training or research. No authentication required. Query by metadata, visualize in browser, check licenses.
by K-Dense-AI/scientific-agent-skills / skills/imaging-data-commons
Imessage
Send and receive iMessages/SMS via the imsg CLI on macOS.
by NousResearch/hermes-agent / skills/apple/imessage
Impediment Prioritization
Ranks any list of impediments and their countermeasures using a value-stream scoring model (ROI, Cost to Implement, Ease of Deployment, Risk Factor) and a fixed prioritization formula. Use when someone asks to prioritize, rank, sequence, or triage impediments, countermeasures, remediation items, risks, findings, gaps, action items, or backlog entries; or mentions value-stream prioritization, A3 / lean countermeasure ranking, ROI vs. effort scoring, or building a remediation / improvement backlog. Works with GHQR findings, audit results, retrospective action items, risk registers, architecture review gaps, or any free-form `{impediment, countermeasure}` list.
by github/awesome-copilot / skills/impediment-prioritization
Implement
Execute plan phases, writing code in spaces/ while tracking in ideas/. Use after creating a plan with /plan to implement work.
by TaylorHuston/local-life-manager / .claude/skills/implement
Implementation Plan Generation Mode
Generate an implementation plan for new features or refactoring existing code.
by github/awesome-copilot / agents/implementation-plan.agent.md
Implementing AES Encryption for Data at Rest
AES (Advanced Encryption Standard) is a symmetric block cipher standardized by NIST (FIPS 197) used to protect
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aes-encryption-for-data-at-rest
Implementing Alert Fatigue Reduction
Implements strategies to reduce SOC alert fatigue by tuning detection rules, consolidating duplicate alerts, implementing risk-based alerting, and measuring alert quality metrics to maintain analyst effectiveness and prevent critical alert dismissal. Use when SOC teams face overwhelming alert volumes, high false positive rates, or declining analyst performance.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-alert-fatigue-reduction
Implementing Anti Phishing Training Program
Security awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positiv
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-anti-phishing-training-program
Implementing Anti Ransomware Group Policy
Configures Windows Group Policy Objects (GPO) to prevent ransomware execution and limit its spread. Implements AppLocker rules, Software Restriction Policies, Controlled Folder Access, attack surface reduction rules, and network protection settings. Activates for requests involving Windows GPO hardening against ransomware, AppLocker configuration, Controlled Folder Access setup, or endpoint protection via Group Policy.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-anti-ransomware-group-policy
Implementing API Abuse Detection With Rate Limiting
Implement API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and credential stuffing attacks.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-abuse-detection-with-rate-limiting
Implementing API Gateway Security Controls
Implements security controls at the API gateway layer including authentication enforcement, rate limiting, request validation, IP allowlisting, TLS termination, and threat protection. The engineer configures API gateways (Kong, AWS API Gateway, Azure APIM, Apigee) to act as a centralized security enforcement point that validates, throttles, and monitors all API traffic before it reaches backend services. Activates for requests involving API gateway security, API management security, gateway authentication, or centralized API protection.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-gateway-security-controls
Implementing API Key Security Controls
Implements secure API key generation, storage, rotation, and revocation controls to protect API authentication credentials from leakage, brute force, and abuse. The engineer designs API key formats with sufficient entropy, implements secure hashing for storage, enforces per-key scoping and rate limiting, monitors for leaked keys in public repositories, and builds key rotation workflows. Activates for requests involving API key management, API key security, key rotation policy, or API credential protection.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-key-security-controls
Implementing API Rate Limiting And Throttling
Implements API rate limiting and throttling controls using token bucket, sliding window, and fixed window algorithms to protect against brute force attacks, credential stuffing, resource exhaustion, and API abuse. The engineer configures per-user, per-IP, and per-endpoint rate limits using Redis-backed counters, API gateway plugins, or application middleware, and implements proper HTTP 429 responses with Retry-After headers. Activates for requests involving rate limiting implementation, API throttling setup, request quota management, or API abuse prevention.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-rate-limiting-and-throttling
Implementing API Schema Validation Security
Implement API schema validation using OpenAPI specifications and JSON Schema to enforce input/output contracts and prevent injection, data exposure, and mass assignment attacks.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-schema-validation-security
Implementing API Security Posture Management
Implement API Security Posture Management to continuously discover, classify, and score APIs based on risk while enforcing security policies across the API lifecycle.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-security-posture-management
Implementing API Security Testing with 42Crunch
Implement comprehensive API security testing using the 42Crunch platform to perform static audit and dynamic
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-security-testing-with-42crunch
Implementing API Threat Protection With Apigee
Implement API threat protection using Google Apigee policies including JSON/XML threat protection, OAuth 2.0, SpikeArrest, and Advanced API Security for OWASP Top 10 defense.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-api-threat-protection-with-apigee
Implementing Application Whitelisting With Applocker
Implements application whitelisting using Windows AppLocker to restrict unauthorized software execution on endpoints, reducing attack surface from malware, unauthorized tools, and shadow IT. Use when enforcing application control policies, meeting compliance requirements for software restriction, or preventing execution of unsigned or untrusted binaries. Activates for requests involving AppLocker, application whitelisting, software restriction, or executable control.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-application-whitelisting-with-applocker
Implementing Aqua Security For Container Scanning
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aqua-security-for-container-scanning
Implementing Attack Path Analysis with XM Cyber
Deploy XM Cyber's continuous exposure management platform to map attack paths, identify choke points, and prioritize
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-attack-path-analysis-with-xm-cyber
Implementing Attack Surface Management
Implements external attack surface management (EASM) using Shodan, Censys, and ProjectDiscovery tools (subfinder, httpx, nuclei) for asset discovery, subdomain enumeration, service fingerprinting, and exposure scoring. Includes a weighted risk scoring algorithm based on OWASP attack surface analysis methodology and the Relative Attack Surface Quotient (RSQ). Use when building continuous ASM programs or performing external reconnaissance for security assessments.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-attack-surface-management
Implementing AWS Config Rules For Compliance
Implementing AWS Config rules for continuous compliance monitoring of AWS resources, deploying managed and custom rules aligned to CIS and PCI DSS frameworks, configuring automatic remediation with SSM Automation, and aggregating compliance data across accounts.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aws-config-rules-for-compliance
Implementing AWS Iam Permission Boundaries
Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aws-iam-permission-boundaries
Implementing AWS Macie For Data Classification
Implement Amazon Macie to automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aws-macie-for-data-classification
Implementing AWS Nitro Enclave Security
Implements AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy integration using PCR-based condition keys, and secure vsock communication channels. The practitioner builds enclave images, configures attestation-aware KMS policies, validates attestation documents against the AWS Nitro PKI root of trust, and establishes isolated computation pipelines for processing sensitive data such as PII, cryptographic keys, and healthcare records. Activates for requests involving Nitro Enclave setup, enclave attestation validation, confidential computing on AWS, or KMS enclave policy configuration.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aws-nitro-enclave-security
Implementing AWS Security Hub
This skill covers deploying AWS Security Hub as a centralized cloud security posture management platform that aggregates findings from GuardDuty, Inspector, Macie, and third-party tools. It details enabling security standards like CIS AWS Foundations Benchmark, configuring automated remediation, and building executive dashboards for compliance tracking across multi-account AWS organizations.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aws-security-hub
Implementing AWS Security Hub Compliance
Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-aws-security-hub-compliance
Implementing Azure Ad Privileged Identity Management
Configure Microsoft Entra Privileged Identity Management to enforce just-in-time role activation, approval workflows, and access reviews for Azure AD privileged roles.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-azure-ad-privileged-identity-management
Implementing Azure Defender For Cloud
Implementing Microsoft Defender for Cloud to enable cloud security posture management, workload protection across VMs, containers, databases, and storage, configure security recommendations, and set up adaptive security controls with automated remediation.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-azure-defender-for-cloud
Implementing Beyondcorp Zero Trust Access Model
Implementing Google's BeyondCorp zero trust access model to eliminate implicit trust from the network perimeter, enforce identity-aware access controls using IAP, Access Context Manager, and Chrome Enterprise Premium for VPN-less secure application access.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-beyondcorp-zero-trust-access-model
Implementing Bgp Security With Rpki
Implement BGP route origin validation using RPKI with Route Origin Authorizations, RPKI-to-Router protocol, and ROV policies on Cisco and Juniper routers to prevent route hijacking.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-bgp-security-with-rpki
Implementing Browser Isolation for Zero Trust
'Deploys remote browser isolation (RBI) as a core component of a Zero Trust architecture. Implements isolation
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-browser-isolation-for-zero-trust
Implementing Canary Tokens For Network Intrusion
Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement. Integrates with webhook alerting (Slack, Teams, email, generic HTTP) for real-time intrusion notifications. Provides automated token generation, placement strategies, and monitoring for enterprise network environments. Use when building deception-based network intrusion detection with Canarytokens.org and Thinkst Canary platforms.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-canary-tokens-for-network-intrusion
Implementing Cisa Zero Trust Maturity Model
Implement the CISA Zero Trust Maturity Model v2.0 across the five pillars of identity, devices, networks, applications, and data to achieve progressive organizational zero trust maturity.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-cisa-zero-trust-maturity-model
Implementing Cloud Dlp For Data Protection
Implementing Cloud Data Loss Prevention (DLP) using Amazon Macie, Azure Information Protection, and Google Cloud DLP API to discover, classify, and protect sensitive data across cloud storage, databases, and data pipelines.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-cloud-dlp-for-data-protection
Implementing Cloud Security Posture Management
Implementing Cloud Security Posture Management (CSPM) to continuously monitor multi-cloud environments for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Azure Defender, and GCP Security Command Center.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-cloud-security-posture-management
Implementing Cloud Trail Log Analysis
Implementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-cloud-trail-log-analysis
Implementing Cloud Vulnerability Posture Management
Implement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite for multi-cloud vulnerability detection.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-cloud-vulnerability-posture-management
Implementing Cloud Waf Rules
This skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare to protect cloud-hosted applications against OWASP Top 10 attacks. It details configuring managed rule sets, creating custom rules for business logic protection, implementing rate limiting, deploying bot management, and reducing false positives through rule tuning and logging analysis.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-cloud-waf-rules
Implementing Cloud Workload Protection
'Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-cloud-workload-protection
Implementing Code Signing For Artifacts
This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific signing tools, establishing trust chains, and verifying signatures in deployment pipelines.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-code-signing-for-artifacts
Implementing Conditional Access Policies in Azure AD
Configure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control. Covers signal-based
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-conditional-access-policies-azure-ad
Implementing Conduit Security For Ot Remote Access
Implement secure conduit architecture for OT remote access following IEC 62443 zones and conduits model, deploying jump servers, MFA-enabled gateways, session recording, and approval-based workflows to control vendor and engineer access to industrial control systems without exposing OT networks directly.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-conduit-security-for-ot-remote-access
Implementing Container Image Minimal Base With Distroless
Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-container-image-minimal-base-with-distroless
Implementing Container Network Policies With Calico
Enforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-container-network-policies-with-calico
Implementing Continuous Security Validation With Bas
Deploy Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulating real-world attack techniques across the kill chain.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-continuous-security-validation-with-bas
Implementing Data Loss Prevention With Microsoft Purview
Implements data loss prevention policies using Microsoft Purview to protect sensitive information across Exchange Online, SharePoint, OneDrive, Teams, endpoint devices, and Power BI. The analyst configures sensitivity labels with encryption and content marking, creates DLP policies using built-in and custom sensitive information types with regex patterns, deploys endpoint DLP rules to control file operations on Windows and macOS devices, and monitors policy effectiveness through Activity Explorer and DLP alert management. Uses PowerShell cmdlets and the Microsoft Graph API for programmatic policy management. Activates for requests involving DLP policy creation, sensitivity label configuration, data classification, endpoint data protection, or Microsoft Purview compliance administration.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-data-loss-prevention-with-microsoft-purview
Implementing Ddos Mitigation With Cloudflare
Configure Cloudflare DDoS protection with managed rulesets, rate limiting, WAF rules, Bot Management, and origin protection to mitigate volumetric, protocol, and application-layer attacks.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-ddos-mitigation-with-cloudflare
Implementing Deception Based Detection With Canarytoken
Deploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug tokens, DNS tokens, document tokens, and AWS key tokens.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-deception-based-detection-with-canarytoken
Implementing Delinea Secret Server For Pam
Implements Delinea Secret Server for privileged access management (PAM) including secret vault configuration, role-based access policies, automated password rotation, session recording, and integration with Active Directory and cloud platforms. Activates for requests involving PAM deployment, privileged credential vaulting, secret server administration, or password rotation automation.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-delinea-secret-server-for-pam
Implementing Device Posture Assessment In Zero Trust
Implementing device posture assessment as a zero trust access control by integrating endpoint health signals from CrowdStrike ZTA, Microsoft Intune, and Jamf into conditional access policies that enforce compliance before granting resource access.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-device-posture-assessment-in-zero-trust
Implementing Devsecops Security Scanning
Integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) into CI/CD pipelines using open-source tools. Covers Semgrep for SAST, Trivy for SCA and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets detection. Activates for requests involving DevSecOps pipeline setup, automated security scanning in CI/CD, SAST/DAST/SCA integration, or shift-left security implementation.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-devsecops-security-scanning
Implementing Diamond Model Analysis
The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features - Adversary, Capability, Infrastructure, and Victim. This skill covers implementing the Diamond Model programmatically to classify and correlate intrusion events, build activity threads, and generate pivot-ready intelligence.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-diamond-model-analysis
Implementing Digital Signatures with Ed25519
Ed25519 is a high-performance digital signature algorithm using the Edwards curve Curve25519. It provides 128-bit
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-digital-signatures-with-ed25519
Implementing Disk Encryption With Bitlocker
Implements full disk encryption using Microsoft BitLocker on Windows endpoints to protect data at rest from unauthorized access in case of device loss or theft. Use when deploying encryption for compliance requirements, securing mobile workstations, or implementing data protection controls across the enterprise. Activates for requests involving BitLocker encryption, disk encryption, TPM configuration, or data-at-rest protection.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-disk-encryption-with-bitlocker
Implementing Dmarc Dkim Spf Email Security
SPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validate message integrity, and define policies for handling unauthenticated mail. Proper im
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-dmarc-dkim-spf-email-security
Implementing Dragos Platform For Ot Monitoring
Deploy and configure the Dragos Platform for OT network monitoring, leveraging its 600+ industrial protocol parsers, intelligence-driven threat detection analytics, and asset visibility capabilities to protect ICS environments against threat groups like VOLTZITE, GRAPHITE, and BAUXITE.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-dragos-platform-for-ot-monitoring
Implementing Ebpf Security Monitoring
Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement. Covers TracingPolicy CRD authoring with kprobe/tracepoint hooks, in-kernel filtering via matchArgs/matchBinaries selectors, JSON event export, and integration with SIEM pipelines. Use when building kernel-level runtime security observability for Linux hosts or Kubernetes clusters.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-ebpf-security-monitoring
Implementing Email Sandboxing With Proofpoint
Email sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malware and evasive phishing payloads. Proofpoint Targeted Attack Protection (TAP) is an industry
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-email-sandboxing-with-proofpoint
Implementing Endpoint Detection with Wazuh
Deploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and rule
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-endpoint-detection-with-wazuh
Implementing Endpoint Dlp Controls
Implements endpoint Data Loss Prevention (DLP) controls to detect and prevent sensitive data exfiltration through email, USB, cloud storage, and printing. Use when deploying DLP agents, creating content inspection policies, or preventing unauthorized data movement from endpoints. Activates for requests involving DLP, data exfiltration prevention, content inspection, or sensitive data protection on endpoints.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-endpoint-dlp-controls
Implementing End-to-End Encryption for Messaging
End-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-end-to-end-encryption-for-messaging
Implementing Envelope Encryption With AWS Kms
Envelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a master key (KEK) managed by AWS KMS. This approach allows encrypting
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-envelope-encryption-with-aws-kms
Implementing Epss Score For Vulnerability Prioritization
Integrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based on real-world exploitation probability within 30 days.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-epss-score-for-vulnerability-prioritization
Implementing File Integrity Monitoring With Aide
Configure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, scheduled integrity checks, change detection, and alerting
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-file-integrity-monitoring-with-aide
Implementing Fuzz Testing In Cicd With Aflplusplus
Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-fuzz-testing-in-cicd-with-aflplusplus
Implementing GCP Binary Authorization
Implement GCP Binary Authorization to enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-gcp-binary-authorization
Implementing GCP Organization Policy Constraints
Implement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-gcp-organization-policy-constraints
Implementing GCP Vpc Firewall Rules
Implementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egress traffic, apply hierarchical firewall policies across the organization, and monitor firewall rule effectiveness using VPC Flow Logs.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-gcp-vpc-firewall-rules
Implementing Gdpr Data Protection Controls
The General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing the collection, processing, storage, and transfer of personal data. This skill cover
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-gdpr-data-protection-controls
Implementing GDPR Data Subject Access Request (DSAR) Workflow
'Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-gdpr-data-subject-access-request
Implementing GitHub Advanced Security For Code Scanning
Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-github-advanced-security-for-code-scanning
Implementing Google Workspace Admin Security
Implements comprehensive Google Workspace security hardening including admin console configuration, phishing-resistant MFA enforcement, DLP policies, email authentication (SPF/DKIM/DMARC), OAuth app control, and external sharing restrictions. Activates for requests involving Google Workspace hardening, G Suite security configuration, or cloud office security administration.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-google-workspace-admin-security
Implementing Google Workspace Phishing Protection
Configure Google Workspace advanced phishing and malware protection settings including pre-delivery scanning, attachment protection, spoofing detection, and Enhanced Safe Browsing.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-google-workspace-phishing-protection
Implementing Google Workspace Sso Configuration
Configure SAML 2.0 single sign-on for Google Workspace with a third-party identity provider, enabling centralized authentication and enforcing organization-wide access policies.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-google-workspace-sso-configuration
Implementing Hardware Security Key Authentication
Implements FIDO2/WebAuthn hardware security key authentication including registration ceremonies, authentication flows, YubiKey enrollment, and passkey migration strategies. Builds a complete relying party server using the python-fido2 library that supports cross-platform authenticators, resident key (discoverable credential) workflows, and user verification policies. Activates for requests involving FIDO2 implementation, WebAuthn registration, hardware security key enrollment, YubiKey integration, or passkey migration from password-based authentication.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-hardware-security-key-authentication
Implementing Hashicorp Vault Dynamic Secrets
Implements HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates with automatic generation, lease management, and credential rotation to eliminate static secrets in application configurations. Activates for requests involving Vault secrets engine configuration, dynamic database credentials, ephemeral cloud credentials, or automated secret rotation.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-hashicorp-vault-dynamic-secrets
Implementing Honeypot For Ransomware Detection
Deploys canary files, honeypot shares, and decoy systems to detect ransomware activity at the earliest possible stage. Configures canary tokens embedded in strategic file locations that trigger alerts when ransomware attempts encryption, uses honeypot network shares that mimic high-value targets, and deploys Thinkst Canary appliances for comprehensive deception-based detection. Activates for requests involving ransomware honeypots, canary files, deception technology for ransomware, or early ransomware alerting.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-honeypot-for-ransomware-detection
Implementing Honeytokens For Breach Detection
Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers. Uses the Canarytokens API and custom webhook integrations for breach detection. Use when building deception-based early warning systems for intrusion detection.
by mukul975/Anthropic-Cybersecurity-Skills / skills/implementing-honeytokens-for-breach-detection