Agent skills in plugin format
A skill is a Markdown file that tells a coding agent how to do one job. We parse every one we can find — the frontmatter, the outline, the languages in its code blocks — so you can look for the one that fits instead of reading through a repository to find out.
69,865 skills from 9,574 repositories, last read 11 September 2026.
Skills declare what they need inconsistently: 58.8% name the languages they run, 11.2% list the tools they ask for, and 4.6% give themselves a category. Filtering narrows to the ones that said so, never to the ones that are.
- implementing-azure-defender-for-cloudmukul975/Anthropic-Cybersecurity-Skills
- detecting-secure-boot-bypassmukul975/Anthropic-Cybersecurity-Skills
- analyzing-web-server-logs-for-intrusionmukul975/Anthropic-Cybersecurity-Skills
- analyzing-bootkit-and-rootkit-samplesmukul975/Anthropic-Cybersecurity-Skills
- implementing-stix-taxii-feed-integrationmukul975/Anthropic-Cybersecurity-Skills
- building-soc-playbook-for-ransomwaremukul975/Anthropic-Cybersecurity-Skills
- securing-container-registry-with-harbormukul975/Anthropic-Cybersecurity-Skills
- performing-plc-firmware-security-analysismukul975/Anthropic-Cybersecurity-Skills
- performing-supply-chain-attack-simulationmukul975/Anthropic-Cybersecurity-Skills
- performing-log-source-onboarding-in-siemmukul975/Anthropic-Cybersecurity-Skills
- implementing-ebpf-security-monitoringmukul975/Anthropic-Cybersecurity-Skills
- implementing-vulnerability-remediation-slamukul975/Anthropic-Cybersecurity-Skills
- building-detection-rules-with-sigmamukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-event-logs-in-splunkmukul975/Anthropic-Cybersecurity-Skills
- detecting-evasion-techniques-in-endpoint-logsmukul975/Anthropic-Cybersecurity-Skills
- detecting-t1003-credential-dumping-with-edrmukul975/Anthropic-Cybersecurity-Skills
- deploying-ransomware-canary-filesmukul975/Anthropic-Cybersecurity-Skills
- implementing-epss-score-for-vulnerability-prioritizationmukul975/Anthropic-Cybersecurity-Skills
- implementing-image-provenance-verification-with-cosignmukul975/Anthropic-Cybersecurity-Skills
- performing-malware-hash-enrichment-with-virustotalmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-unusual-network-connectionsmukul975/Anthropic-Cybersecurity-Skills
- performing-container-security-scanning-with-trivymukul975/Anthropic-Cybersecurity-Skills
- managing-third-party-vendor-riskmukul975/Anthropic-Cybersecurity-Skills
- building-vulnerability-dashboard-with-defectdojomukul975/Anthropic-Cybersecurity-Skills
- acquiring-disk-image-with-dd-and-dcflddmukul975/Anthropic-Cybersecurity-Skills
- performing-network-packet-capture-analysismukul975/Anthropic-Cybersecurity-Skills
- scanning-iac-and-images-with-trivymukul975/Anthropic-Cybersecurity-Skills
- implementing-ddos-mitigation-with-cloudflaremukul975/Anthropic-Cybersecurity-Skills
- implementing-google-workspace-phishing-protectionmukul975/Anthropic-Cybersecurity-Skills
- detecting-living-off-the-land-attacksmukul975/Anthropic-Cybersecurity-Skills
- implementing-next-generation-firewall-with-palo-altomukul975/Anthropic-Cybersecurity-Skills
- detecting-arp-poisoning-in-network-trafficmukul975/Anthropic-Cybersecurity-Skills
- conducting-man-in-the-middle-attack-simulationmukul975/Anthropic-Cybersecurity-Skills
- analyzing-apt-group-with-mitre-navigatormukul975/Anthropic-Cybersecurity-Skills
- building-role-mining-for-rbac-optimizationmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-knowledge-proof-for-authenticationmukul975/Anthropic-Cybersecurity-Skills
- implementing-bgp-security-with-rpkimukul975/Anthropic-Cybersecurity-Skills
- implementing-api-threat-protection-with-apigeemukul975/Anthropic-Cybersecurity-Skills
- performing-content-security-policy-bypassmukul975/Anthropic-Cybersecurity-Skills
- detecting-dll-sideloading-attacksmukul975/Anthropic-Cybersecurity-Skills
- detecting-modbus-command-injection-attacksmukul975/Anthropic-Cybersecurity-Skills
- implementing-patch-management-for-ot-systemsmukul975/Anthropic-Cybersecurity-Skills
- scanning-infrastructure-with-nessusmukul975/Anthropic-Cybersecurity-Skills
- exploiting-http-request-smugglingmukul975/Anthropic-Cybersecurity-Skills
- performing-endpoint-forensics-investigationmukul975/Anthropic-Cybersecurity-Skills
- performing-false-positive-reduction-in-siemmukul975/Anthropic-Cybersecurity-Skills
- mapping-attack-paths-with-bloodhound-cemukul975/Anthropic-Cybersecurity-Skills
- detecting-malicious-scheduled-tasks-with-sysmonmukul975/Anthropic-Cybersecurity-Skills
- assessing-vector-and-embedding-weaknessesmukul975/Anthropic-Cybersecurity-Skills
- implementing-hashicorp-vault-dynamic-secretsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-memory-forensics-with-lime-and-volatilitymukul975/Anthropic-Cybersecurity-Skills
- detecting-compromised-cloud-credentialsmukul975/Anthropic-Cybersecurity-Skills
- implementing-passwordless-auth-with-microsoft-entramukul975/Anthropic-Cybersecurity-Skills
- performing-threat-landscape-assessment-for-sectormukul975/Anthropic-Cybersecurity-Skills
- performing-purple-team-atomic-testingmukul975/Anthropic-Cybersecurity-Skills
- performing-linux-log-forensics-investigationmukul975/Anthropic-Cybersecurity-Skills
- analyzing-threat-landscape-with-mispmukul975/Anthropic-Cybersecurity-Skills
- implementing-ot-incident-response-playbookmukul975/Anthropic-Cybersecurity-Skills
- testing-for-business-logic-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- detecting-supply-chain-attacks-in-ci-cdmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-data-staging-before-exfiltrationmukul975/Anthropic-Cybersecurity-Skills
- analyzing-kubernetes-audit-logsmukul975/Anthropic-Cybersecurity-Skills
- exploiting-mass-assignment-in-rest-apismukul975/Anthropic-Cybersecurity-Skills
- detecting-attacks-on-scada-systemsmukul975/Anthropic-Cybersecurity-Skills
- detecting-t1548-abuse-elevation-control-mechanismmukul975/Anthropic-Cybersecurity-Skills
- testing-android-intents-for-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- operationalizing-misp-threat-feedsmukul975/Anthropic-Cybersecurity-Skills
- performing-packet-injection-attackmukul975/Anthropic-Cybersecurity-Skills
- enumerating-cloud-with-cloudfoxmukul975/Anthropic-Cybersecurity-Skills
- implementing-threat-modeling-with-mitre-attackmukul975/Anthropic-Cybersecurity-Skills
- designing-adversary-engagement-with-mitre-engagemukul975/Anthropic-Cybersecurity-Skills
- performing-wifi-password-cracking-with-aircrackmukul975/Anthropic-Cybersecurity-Skills
- implementing-deception-based-detection-with-canarytokenmukul975/Anthropic-Cybersecurity-Skills
- analyzing-active-directory-acl-abusemukul975/Anthropic-Cybersecurity-Skills
- detecting-cryptomining-in-cloudmukul975/Anthropic-Cybersecurity-Skills
- generating-and-analyzing-sbomsmukul975/Anthropic-Cybersecurity-Skills
- building-c2-infrastructure-with-sliver-frameworkmukul975/Anthropic-Cybersecurity-Skills
- profiling-threat-actor-groupsmukul975/Anthropic-Cybersecurity-Skills
- implementing-api-security-posture-managementmukul975/Anthropic-Cybersecurity-Skills
- configuring-hsm-for-key-storagemukul975/Anthropic-Cybersecurity-Skills
- correlating-security-events-in-qradarmukul975/Anthropic-Cybersecurity-Skills
- implementing-network-segmentation-for-otmukul975/Anthropic-Cybersecurity-Skills
- testing-for-xss-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-defense-evasion-via-timestompingmukul975/Anthropic-Cybersecurity-Skills
- conducting-post-incident-lessons-learnedmukul975/Anthropic-Cybersecurity-Skills
- implementing-supply-chain-security-with-in-totomukul975/Anthropic-Cybersecurity-Skills
- implementing-siem-use-cases-for-detectionmukul975/Anthropic-Cybersecurity-Skills
- performing-open-source-intelligence-gatheringmukul975/Anthropic-Cybersecurity-Skills
- performing-android-app-static-analysis-with-mobsfmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-dns-tunneling-with-zeekmukul975/Anthropic-Cybersecurity-Skills
- performing-agentless-vulnerability-scanningmukul975/Anthropic-Cybersecurity-Skills
- analyzing-azure-activity-logs-for-threatsmukul975/Anthropic-Cybersecurity-Skills
- implementing-syslog-centralization-with-rsyslogmukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-config-rules-for-compliancemukul975/Anthropic-Cybersecurity-Skills
- implementing-pci-dss-compliance-controlsmukul975/Anthropic-Cybersecurity-Skills
- conducting-full-scope-red-team-engagementmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-lolbins-execution-in-endpoint-logsmukul975/Anthropic-Cybersecurity-Skills
- performing-ios-app-security-assessmentmukul975/Anthropic-Cybersecurity-Skills
- investigating-ransomware-attack-artifactsmukul975/Anthropic-Cybersecurity-Skills
- testing-for-xml-injection-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- correlating-threat-campaignsmukul975/Anthropic-Cybersecurity-Skills
- detecting-s3-data-exfiltration-attemptsmukul975/Anthropic-Cybersecurity-Skills
- detecting-ransomware-precursors-in-networkmukul975/Anthropic-Cybersecurity-Skills
- implementing-llm-guardrails-for-securitymukul975/Anthropic-Cybersecurity-Skills
- building-c2-redirector-infrastructuremukul975/Anthropic-Cybersecurity-Skills
- conducting-network-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- analyzing-mft-for-deleted-file-recoverymukul975/Anthropic-Cybersecurity-Skills
- securing-api-gateway-with-aws-wafmukul975/Anthropic-Cybersecurity-Skills
- performing-clickjacking-attack-testmukul975/Anthropic-Cybersecurity-Skills
- reverse-engineering-android-malware-with-jadxmukul975/Anthropic-Cybersecurity-Skills
- performing-hash-cracking-with-hashcatmukul975/Anthropic-Cybersecurity-Skills
- intercepting-mobile-traffic-with-burpsuitemukul975/Anthropic-Cybersecurity-Skills
- processing-stix-taxii-feedsmukul975/Anthropic-Cybersecurity-Skills
- exploiting-api-injection-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-command-and-control-beaconingmukul975/Anthropic-Cybersecurity-Skills
- detecting-port-scanning-with-fail2banmukul975/Anthropic-Cybersecurity-Skills
- analyzing-linux-audit-logs-for-intrusionmukul975/Anthropic-Cybersecurity-Skills
- building-threat-intelligence-enrichment-in-splunkmukul975/Anthropic-Cybersecurity-Skills
- implementing-rsa-key-pair-managementmukul975/Anthropic-Cybersecurity-Skills
- performing-active-directory-vulnerability-assessmentmukul975/Anthropic-Cybersecurity-Skills
- analyzing-macro-malware-in-office-documentsmukul975/Anthropic-Cybersecurity-Skills
- performing-network-traffic-analysis-with-tsharkmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-registry-run-key-persistencemukul975/Anthropic-Cybersecurity-Skills
- implementing-saml-sso-with-oktamukul975/Anthropic-Cybersecurity-Skills
- implementing-usb-device-control-policymukul975/Anthropic-Cybersecurity-Skills
- detecting-modbus-protocol-anomaliesmukul975/Anthropic-Cybersecurity-Skills
- auditing-azure-active-directory-configurationmukul975/Anthropic-Cybersecurity-Skills
- escaping-containers-to-hostmukul975/Anthropic-Cybersecurity-Skills
- exploiting-sql-injection-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- implementing-end-to-end-encryption-for-messagingmukul975/Anthropic-Cybersecurity-Skills
- building-identity-governance-lifecycle-processmukul975/Anthropic-Cybersecurity-Skills
- hunting-evtx-with-chainsawmukul975/Anthropic-Cybersecurity-Skills
- detecting-indirect-prompt-injectionmukul975/Anthropic-Cybersecurity-Skills
- performing-dns-tunneling-detectionmukul975/Anthropic-Cybersecurity-Skills
- detecting-mobile-malware-behaviormukul975/Anthropic-Cybersecurity-Skills
- implementing-honeytokens-for-breach-detectionmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-domain-fronting-c2-trafficmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-network-accessmukul975/Anthropic-Cybersecurity-Skills
- building-soc-escalation-matrixmukul975/Anthropic-Cybersecurity-Skills
- extracting-credentials-from-memory-dumpmukul975/Anthropic-Cybersecurity-Skills
- conducting-memory-forensics-with-volatilitymukul975/Anthropic-Cybersecurity-Skills
- performing-bandwidth-throttling-attack-simulationmukul975/Anthropic-Cybersecurity-Skills
- performing-gcp-security-assessment-with-forsetimukul975/Anthropic-Cybersecurity-Skills
- fleet-hunting-with-velociraptormukul975/Anthropic-Cybersecurity-Skills
- extracting-iocs-from-malware-samplesmukul975/Anthropic-Cybersecurity-Skills
- building-ransomware-playbook-with-cisa-frameworkmukul975/Anthropic-Cybersecurity-Skills
- testing-cors-misconfigurationmukul975/Anthropic-Cybersecurity-Skills
- building-automated-malware-submission-pipelinemukul975/Anthropic-Cybersecurity-Skills
- testing-for-host-header-injectionmukul975/Anthropic-Cybersecurity-Skills
- abusing-shadow-credentials-for-privescmukul975/Anthropic-Cybersecurity-Skills
- analyzing-cloud-storage-access-patternsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-packed-malware-with-upx-unpackermukul975/Anthropic-Cybersecurity-Skills
- auditing-mcp-servers-for-tool-poisoningmukul975/Anthropic-Cybersecurity-Skills
- building-malware-incident-communication-templatemukul975/Anthropic-Cybersecurity-Skills
- testing-api-for-mass-assignment-vulnerabilitymukul975/Anthropic-Cybersecurity-Skills
- modeling-threats-with-openctimukul975/Anthropic-Cybersecurity-Skills
- conducting-internal-network-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- implementing-anti-ransomware-group-policymukul975/Anthropic-Cybersecurity-Skills
- performing-authenticated-vulnerability-scanmukul975/Anthropic-Cybersecurity-Skills
- analyzing-uefi-bootkit-persistencemukul975/Anthropic-Cybersecurity-Skills
- exploiting-aws-with-pacumukul975/Anthropic-Cybersecurity-Skills
- implementing-privileged-session-monitoringmukul975/Anthropic-Cybersecurity-Skills
- performing-malware-ioc-extractionmukul975/Anthropic-Cybersecurity-Skills
- implementing-network-intrusion-prevention-with-suricatamukul975/Anthropic-Cybersecurity-Skills
- implementing-google-workspace-sso-configurationmukul975/Anthropic-Cybersecurity-Skills
- exploiting-constrained-delegation-abusemukul975/Anthropic-Cybersecurity-Skills
- configuring-suricata-for-network-monitoringmukul975/Anthropic-Cybersecurity-Skills
- evaluating-threat-intelligence-platformsmukul975/Anthropic-Cybersecurity-Skills
- performing-power-grid-cybersecurity-assessmentmukul975/Anthropic-Cybersecurity-Skills
- tracking-threat-actor-infrastructuremukul975/Anthropic-Cybersecurity-Skills
- implementing-network-access-controlmukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-iam-permission-boundariesmukul975/Anthropic-Cybersecurity-Skills
- performing-ot-network-security-assessmentmukul975/Anthropic-Cybersecurity-Skills
- auditing-gcp-iam-permissionsmukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-forensics-with-aws-cloudtrailmukul975/Anthropic-Cybersecurity-Skills
- conducting-internal-reconnaissance-with-bloodhound-cemukul975/Anthropic-Cybersecurity-Skills
- implementing-endpoint-detection-with-wazuhmukul975/Anthropic-Cybersecurity-Skills
- managing-cloud-identity-with-oktamukul975/Anthropic-Cybersecurity-Skills
- performing-kubernetes-penetration-testingmukul975/Anthropic-Cybersecurity-Skills
- analyzing-golang-malware-with-ghidramukul975/Anthropic-Cybersecurity-Skills
- performing-ics-asset-discovery-with-clarotymukul975/Anthropic-Cybersecurity-Skills
- detecting-lateral-movement-with-zeekmukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-forensics-investigationmukul975/Anthropic-Cybersecurity-Skills
- integrating-dast-with-owasp-zap-in-pipelinemukul975/Anthropic-Cybersecurity-Skills
- performing-dynamic-analysis-with-any-runmukul975/Anthropic-Cybersecurity-Skills
- performing-ssrf-vulnerability-exploitationmukul975/Anthropic-Cybersecurity-Skills
- detecting-aws-iam-privilege-escalationmukul975/Anthropic-Cybersecurity-Skills
- implementing-conduit-security-for-ot-remote-accessmukul975/Anthropic-Cybersecurity-Skills
- detecting-model-extraction-attacksmukul975/Anthropic-Cybersecurity-Skills
- analyzing-network-traffic-with-wiresharkmukul975/Anthropic-Cybersecurity-Skills
- executing-nist-rmf-authorization-to-operatemukul975/Anthropic-Cybersecurity-Skills
- performing-hardware-security-module-integrationmukul975/Anthropic-Cybersecurity-Skills
- analyzing-malicious-url-with-urlscanmukul975/Anthropic-Cybersecurity-Skills
- testing-for-system-prompt-leakagemukul975/Anthropic-Cybersecurity-Skills
- securing-aws-lambda-execution-rolesmukul975/Anthropic-Cybersecurity-Skills
- performing-web-application-firewall-bypassmukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-lnk-files-for-artifactsmukul975/Anthropic-Cybersecurity-Skills
- performing-cryptographic-audit-of-applicationmukul975/Anthropic-Cybersecurity-Skills
- detecting-dnp3-protocol-anomaliesmukul975/Anthropic-Cybersecurity-Skills
- performing-fuzzing-with-aflplusplusmukul975/Anthropic-Cybersecurity-Skills
The whole corpus is one call away through the search API, or ask a question of it on the index itself.