Agent skills that run bash
A skill is a Markdown file that tells a coding agent how to do one job. We parse every one we can find — the frontmatter, the outline, the languages in its code blocks — so you can look for the one that fits instead of reading through a repository to find out.
69,865 skills from 9,574 repositories, last read 11 September 2026.
Skills declare what they need inconsistently: 58.8% name the languages they run, 11.2% list the tools they ask for, and 4.6% give themselves a category. Filtering narrows to the ones that said so, never to the ones that are.
- extracting-iocs-from-malware-samplesmukul975/Anthropic-Cybersecurity-Skills
- testing-cors-misconfigurationmukul975/Anthropic-Cybersecurity-Skills
- testing-for-host-header-injectionmukul975/Anthropic-Cybersecurity-Skills
- abusing-shadow-credentials-for-privescmukul975/Anthropic-Cybersecurity-Skills
- analyzing-cloud-storage-access-patternsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-packed-malware-with-upx-unpackermukul975/Anthropic-Cybersecurity-Skills
- auditing-mcp-servers-for-tool-poisoningmukul975/Anthropic-Cybersecurity-Skills
- modeling-threats-with-openctimukul975/Anthropic-Cybersecurity-Skills
- conducting-internal-network-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- performing-authenticated-vulnerability-scanmukul975/Anthropic-Cybersecurity-Skills
- analyzing-uefi-bootkit-persistencemukul975/Anthropic-Cybersecurity-Skills
- exploiting-aws-with-pacumukul975/Anthropic-Cybersecurity-Skills
- implementing-privileged-session-monitoringmukul975/Anthropic-Cybersecurity-Skills
- implementing-network-intrusion-prevention-with-suricatamukul975/Anthropic-Cybersecurity-Skills
- exploiting-constrained-delegation-abusemukul975/Anthropic-Cybersecurity-Skills
- configuring-suricata-for-network-monitoringmukul975/Anthropic-Cybersecurity-Skills
- implementing-network-access-controlmukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-iam-permission-boundariesmukul975/Anthropic-Cybersecurity-Skills
- performing-ot-network-security-assessmentmukul975/Anthropic-Cybersecurity-Skills
- auditing-gcp-iam-permissionsmukul975/Anthropic-Cybersecurity-Skills
- conducting-internal-reconnaissance-with-bloodhound-cemukul975/Anthropic-Cybersecurity-Skills
- managing-cloud-identity-with-oktamukul975/Anthropic-Cybersecurity-Skills
- performing-kubernetes-penetration-testingmukul975/Anthropic-Cybersecurity-Skills
- detecting-lateral-movement-with-zeekmukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-forensics-investigationmukul975/Anthropic-Cybersecurity-Skills
- performing-dynamic-analysis-with-any-runmukul975/Anthropic-Cybersecurity-Skills
- performing-ssrf-vulnerability-exploitationmukul975/Anthropic-Cybersecurity-Skills
- detecting-model-extraction-attacksmukul975/Anthropic-Cybersecurity-Skills
- analyzing-network-traffic-with-wiresharkmukul975/Anthropic-Cybersecurity-Skills
- testing-for-system-prompt-leakagemukul975/Anthropic-Cybersecurity-Skills
- securing-aws-lambda-execution-rolesmukul975/Anthropic-Cybersecurity-Skills
- performing-web-application-firewall-bypassmukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-lnk-files-for-artifactsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-memory-dumps-with-volatilitymukul975/Anthropic-Cybersecurity-Skills
- configuring-zscaler-private-access-for-ztnamukul975/Anthropic-Cybersecurity-Skills
- coercing-authentication-with-coercer-petitpotammukul975/Anthropic-Cybersecurity-Skills
- implementing-ransomware-backup-strategymukul975/Anthropic-Cybersecurity-Skills
- performing-web-application-scanning-with-niktomukul975/Anthropic-Cybersecurity-Skills
- testing-for-json-web-token-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- detecting-container-escape-with-falco-rulesmukul975/Anthropic-Cybersecurity-Skills
- performing-docker-bench-security-assessmentmukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-macie-for-data-classificationmukul975/Anthropic-Cybersecurity-Skills
- building-vulnerability-exception-tracking-systemmukul975/Anthropic-Cybersecurity-Skills
- collecting-threat-intelligence-with-mispmukul975/Anthropic-Cybersecurity-Skills
- scanning-container-images-with-grypemukul975/Anthropic-Cybersecurity-Skills
- analyzing-malware-behavior-with-cuckoo-sandboxmukul975/Anthropic-Cybersecurity-Skills
- deploying-cloud-deception-with-decoy-resourcesmukul975/Anthropic-Cybersecurity-Skills
- securing-aws-iam-permissionsmukul975/Anthropic-Cybersecurity-Skills
- performing-timeline-reconstruction-with-plasomukul975/Anthropic-Cybersecurity-Skills
- detecting-rootkit-activitymukul975/Anthropic-Cybersecurity-Skills
- implementing-api-security-testing-with-42crunchmukul975/Anthropic-Cybersecurity-Skills
- detecting-dependency-confusionmukul975/Anthropic-Cybersecurity-Skills
- implementing-network-traffic-analysis-with-arkimemukul975/Anthropic-Cybersecurity-Skills
- conducting-social-engineering-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- exploiting-insecure-data-storage-in-mobilemukul975/Anthropic-Cybersecurity-Skills
- scanning-containers-with-trivy-in-cicdmukul975/Anthropic-Cybersecurity-Skills
- configuring-network-segmentation-with-vlansmukul975/Anthropic-Cybersecurity-Skills
- performing-web-cache-poisoning-attackmukul975/Anthropic-Cybersecurity-Skills
- detecting-lateral-movement-in-networkmukul975/Anthropic-Cybersecurity-Skills
- reverse-engineering-ios-app-with-fridamukul975/Anthropic-Cybersecurity-Skills
- implementing-log-integrity-with-blockchainmukul975/Anthropic-Cybersecurity-Skills
- performing-physical-intrusion-assessmentmukul975/Anthropic-Cybersecurity-Skills
- testing-for-sensitive-data-exposuremukul975/Anthropic-Cybersecurity-Skills
- implementing-gcp-vpc-firewall-rulesmukul975/Anthropic-Cybersecurity-Skills
- implementing-sigstore-for-software-signingmukul975/Anthropic-Cybersecurity-Skills
- detecting-container-runtime-threats-with-falcomukul975/Anthropic-Cybersecurity-Skills
- detecting-network-anomalies-with-zeekmukul975/Anthropic-Cybersecurity-Skills
- detecting-aws-guardduty-findings-automationmukul975/Anthropic-Cybersecurity-Skills
- detecting-entra-offensive-tools-in-graph-logsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-network-traffic-of-malwaremukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-security-hubmukul975/Anthropic-Cybersecurity-Skills
- implementing-attack-surface-managementmukul975/Anthropic-Cybersecurity-Skills
- orchestrating-llm-attacks-with-pyritmukul975/Anthropic-Cybersecurity-Skills
- exploiting-nosql-injection-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- building-super-timelines-with-plasomukul975/Anthropic-Cybersecurity-Skills
- performing-threat-hunting-with-yara-rulesmukul975/Anthropic-Cybersecurity-Skills
- performing-steganography-detectionmukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-nitro-enclave-securitymukul975/Anthropic-Cybersecurity-Skills
- attacking-oauth-with-device-code-phishingmukul975/Anthropic-Cybersecurity-Skills
- detecting-data-and-model-poisoningmukul975/Anthropic-Cybersecurity-Skills
- implementing-container-image-minimal-base-with-distrolessmukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-penetration-testing-with-pacumukul975/Anthropic-Cybersecurity-Skills
- triaging-vulnerabilities-with-ssvc-frameworkmukul975/Anthropic-Cybersecurity-Skills
- detecting-misconfigured-azure-storagemukul975/Anthropic-Cybersecurity-Skills
- analyzing-powershell-script-block-loggingmukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-registry-for-artifactsmukul975/Anthropic-Cybersecurity-Skills
- building-incident-timeline-with-timesketchmukul975/Anthropic-Cybersecurity-Skills
- performing-malware-persistence-investigationmukul975/Anthropic-Cybersecurity-Skills
- performing-aws-privilege-escalation-assessmentmukul975/Anthropic-Cybersecurity-Skills
- performing-ai-driven-osint-correlationmukul975/Anthropic-Cybersecurity-Skills
- exploiting-server-side-request-forgerymukul975/Anthropic-Cybersecurity-Skills
- detecting-ai-model-prompt-injection-attacksmukul975/Anthropic-Cybersecurity-Skills
- conducting-cloud-incident-responsemukul975/Anthropic-Cybersecurity-Skills
- hardening-linux-endpoint-with-cis-benchmarkmukul975/Anthropic-Cybersecurity-Skills
- securing-agentic-ai-tool-invocationmukul975/Anthropic-Cybersecurity-Skills
- implementing-cloud-security-posture-managementmukul975/Anthropic-Cybersecurity-Skills
- performing-serverless-function-security-reviewmukul975/Anthropic-Cybersecurity-Skills
- detecting-command-and-control-over-dnsmukul975/Anthropic-Cybersecurity-Skills
- detecting-shadow-api-endpointsmukul975/Anthropic-Cybersecurity-Skills
- deploying-honeytokens-and-canarytokensmukul975/Anthropic-Cybersecurity-Skills
- defending-llms-with-guardrailsmukul975/Anthropic-Cybersecurity-Skills
- testing-ransomware-recovery-proceduresmukul975/Anthropic-Cybersecurity-Skills
- implementing-policy-as-code-with-open-policy-agentmukul975/Anthropic-Cybersecurity-Skills
- detecting-serverless-function-injectionmukul975/Anthropic-Cybersecurity-Skills
- generating-forensic-timelines-with-hayabusamukul975/Anthropic-Cybersecurity-Skills
- performing-firmware-extraction-with-binwalkmukul975/Anthropic-Cybersecurity-Skills
- scanning-network-with-nmap-advancedmukul975/Anthropic-Cybersecurity-Skills
- triaging-security-incident-with-ir-playbookmukul975/Anthropic-Cybersecurity-Skills
- analyzing-ios-app-security-with-objectionmukul975/Anthropic-Cybersecurity-Skills
- deploying-edr-agent-with-crowdstrikemukul975/Anthropic-Cybersecurity-Skills
- auditing-aws-s3-bucket-permissionsmukul975/Anthropic-Cybersecurity-Skills
- implementing-network-access-control-with-cisco-isemukul975/Anthropic-Cybersecurity-Skills
- performing-mobile-app-certificate-pinning-bypassmukul975/Anthropic-Cybersecurity-Skills
- configuring-pfsense-firewall-rulesmukul975/Anthropic-Cybersecurity-Skills
- hardening-docker-containers-for-productionmukul975/Anthropic-Cybersecurity-Skills
- configuring-snort-ids-for-intrusion-detectionmukul975/Anthropic-Cybersecurity-Skills
- analyzing-network-traffic-for-incidentsmukul975/Anthropic-Cybersecurity-Skills
- detecting-sql-injection-via-waf-logsmukul975/Anthropic-Cybersecurity-Skills
- testing-mobile-api-authenticationmukul975/Anthropic-Cybersecurity-Skills
- securing-kubernetes-on-cloudmukul975/Anthropic-Cybersecurity-Skills
- emulating-cloud-attacks-with-stratus-red-teammukul975/Anthropic-Cybersecurity-Skills
- performing-red-team-phishing-with-gophishmukul975/Anthropic-Cybersecurity-Skills
- performing-external-network-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- implementing-api-gateway-security-controlsmukul975/Anthropic-Cybersecurity-Skills
- integrating-sast-into-github-actions-pipelinemukul975/Anthropic-Cybersecurity-Skills
- analyzing-disk-image-with-autopsymukul975/Anthropic-Cybersecurity-Skills
- securing-container-registry-imagesmukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-native-threat-hunting-with-aws-detectivemukul975/Anthropic-Cybersecurity-Skills
- performing-ssl-tls-inspection-configurationmukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-native-forensics-with-falcomukul975/Anthropic-Cybersecurity-Skills
- detecting-container-drift-at-runtimemukul975/Anthropic-Cybersecurity-Skills
- attacking-entra-id-with-roadtoolsmukul975/Anthropic-Cybersecurity-Skills
- remediating-s3-bucket-misconfigurationmukul975/Anthropic-Cybersecurity-Skills
- implementing-rbac-hardening-for-kubernetesmukul975/Anthropic-Cybersecurity-Skills
- detecting-malicious-npm-packagesmukul975/Anthropic-Cybersecurity-Skills
- deploying-osquery-for-endpoint-monitoringmukul975/Anthropic-Cybersecurity-Skills
- reverse-engineering-dotnet-malware-with-dnspymukul975/Anthropic-Cybersecurity-Skills
- implementing-gcp-binary-authorizationmukul975/Anthropic-Cybersecurity-Skills
- performing-post-quantum-cryptography-migrationmukul975/Anthropic-Cybersecurity-Skills
- eradicating-malware-from-infected-systemsmukul975/Anthropic-Cybersecurity-Skills
- reverse-engineering-malware-with-ghidramukul975/Anthropic-Cybersecurity-Skills
- exploiting-smb-vulnerabilities-with-metasploitmukul975/Anthropic-Cybersecurity-Skills
- implementing-google-workspace-admin-securitymukul975/Anthropic-Cybersecurity-Skills
- detecting-dns-exfiltration-with-dns-query-analysismukul975/Anthropic-Cybersecurity-Skills
- hunting-for-dcom-lateral-movementmukul975/Anthropic-Cybersecurity-Skills
- conducting-domain-persistence-with-dcsyncmukul975/Anthropic-Cybersecurity-Skills
- implementing-cloud-dlp-for-data-protectionmukul975/Anthropic-Cybersecurity-Skills
- performing-csrf-attack-simulationmukul975/Anthropic-Cybersecurity-Skills
- exploiting-zerologon-vulnerability-cve-2020-1472mukul975/Anthropic-Cybersecurity-Skills
- building-red-team-c2-infrastructure-with-havocmukul975/Anthropic-Cybersecurity-Skills
- implementing-semgrep-for-custom-sast-rulesmukul975/Anthropic-Cybersecurity-Skills
- red-teaming-llms-with-garakmukul975/Anthropic-Cybersecurity-Skills
- detecting-typosquatting-packagesmukul975/Anthropic-Cybersecurity-Skills
- performing-sca-dependency-scanning-with-snykmukul975/Anthropic-Cybersecurity-Skills
- abusing-dpapi-for-credential-accessmukul975/Anthropic-Cybersecurity-Skills
- auditing-cloud-with-cis-benchmarksmukul975/Anthropic-Cybersecurity-Skills
- performing-aws-account-enumeration-with-scout-suitemukul975/Anthropic-Cybersecurity-Skills
- testing-for-email-header-injectionmukul975/Anthropic-Cybersecurity-Skills
- auditing-kubernetes-cluster-rbacmukul975/Anthropic-Cybersecurity-Skills
- extracting-browser-history-artifactsmukul975/Anthropic-Cybersecurity-Skills
- performing-mobile-device-forensics-with-cellebritemukul975/Anthropic-Cybersecurity-Skills
- verifying-build-provenance-with-slsa-sigstoremukul975/Anthropic-Cybersecurity-Skills
- performing-wireless-network-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- implementing-api-key-security-controlsmukul975/Anthropic-Cybersecurity-Skills
- implementing-pod-security-admission-controllermukul975/Anthropic-Cybersecurity-Skills
- exploiting-websocket-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- implementing-gcp-organization-policy-constraintsmukul975/Anthropic-Cybersecurity-Skills
- collecting-indicators-of-compromisemukul975/Anthropic-Cybersecurity-Skills
- benchmarking-kubernetes-with-kube-benchmukul975/Anthropic-Cybersecurity-Skills
- detecting-aws-credential-exposure-with-trufflehogmukul975/Anthropic-Cybersecurity-Skills
- performing-disk-forensics-investigationmukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-security-hub-compliancemukul975/Anthropic-Cybersecurity-Skills
- performing-api-security-testing-with-postmanmukul975/Anthropic-Cybersecurity-Skills
- exploiting-type-juggling-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- performing-phishing-simulation-with-gophishmukul975/Anthropic-Cybersecurity-Skills
- scanning-kubernetes-manifests-with-kubesecmukul975/Anthropic-Cybersecurity-Skills
- performing-wireless-security-assessment-with-kismetmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-for-saas-applicationsmukul975/Anthropic-Cybersecurity-Skills
- detecting-privilege-escalation-in-kubernetes-podsmukul975/Anthropic-Cybersecurity-Skills
- performing-web-application-vulnerability-triagemukul975/Anthropic-Cybersecurity-Skills
- analyzing-sbom-for-supply-chain-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- conducting-cloud-penetration-testingmukul975/Anthropic-Cybersecurity-Skills
- detecting-cloud-threats-with-guarddutymukul975/Anthropic-Cybersecurity-Skills
- moving-laterally-with-netexecmukul975/Anthropic-Cybersecurity-Skills
- detecting-container-escape-attemptsmukul975/Anthropic-Cybersecurity-Skills
- deploying-tailscale-for-zero-trust-vpnmukul975/Anthropic-Cybersecurity-Skills
- implementing-cloud-vulnerability-posture-managementmukul975/Anthropic-Cybersecurity-Skills
- conducting-social-engineering-pretext-callmukul975/Anthropic-Cybersecurity-Skills
- detecting-process-injection-techniquesmukul975/Anthropic-Cybersecurity-Skills
- operating-havoc-c2mukul975/Anthropic-Cybersecurity-Skills
- mapping-mitre-attack-techniquesmukul975/Anthropic-Cybersecurity-Skills
- exploiting-prototype-pollution-in-javascriptmukul975/Anthropic-Cybersecurity-Skills
- analyzing-linux-elf-malwaremukul975/Anthropic-Cybersecurity-Skills
- bypassing-authentication-with-forced-browsingmukul975/Anthropic-Cybersecurity-Skills
- validating-backup-integrity-for-recoverymukul975/Anthropic-Cybersecurity-Skills
- configuring-aws-verified-access-for-ztnamukul975/Anthropic-Cybersecurity-Skills
- deploying-palo-alto-prisma-access-zero-trustmukul975/Anthropic-Cybersecurity-Skills
- testing-for-open-redirect-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- relaying-ntlm-for-adcs-esc8mukul975/Anthropic-Cybersecurity-Skills
- detecting-fileless-malware-techniquesmukul975/Anthropic-Cybersecurity-Skills
The whole corpus is one call away through the search API, or ask a question of it on the index itself.