Agent skills in plugin format
A skill is a Markdown file that tells a coding agent how to do one job. We parse every one we can find — the frontmatter, the outline, the languages in its code blocks — so you can look for the one that fits instead of reading through a repository to find out.
69,865 skills from 9,574 repositories, last read 11 September 2026.
Skills declare what they need inconsistently: 58.8% name the languages they run, 11.2% list the tools they ask for, and 4.6% give themselves a category. Filtering narrows to the ones that said so, never to the ones that are.
- implementing-disk-encryption-with-bitlockermukul975/Anthropic-Cybersecurity-Skills
- deploying-osquery-for-endpoint-monitoringmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-living-off-the-land-binariesmukul975/Anthropic-Cybersecurity-Skills
- reverse-engineering-dotnet-malware-with-dnspymukul975/Anthropic-Cybersecurity-Skills
- performing-insider-threat-investigationmukul975/Anthropic-Cybersecurity-Skills
- implementing-vulnerability-management-with-greenbonemukul975/Anthropic-Cybersecurity-Skills
- implementing-soar-playbook-with-palo-alto-xsoarmukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-amcache-artifactsmukul975/Anthropic-Cybersecurity-Skills
- implementing-gcp-binary-authorizationmukul975/Anthropic-Cybersecurity-Skills
- performing-post-quantum-cryptography-migrationmukul975/Anthropic-Cybersecurity-Skills
- eradicating-malware-from-infected-systemsmukul975/Anthropic-Cybersecurity-Skills
- deploying-software-defined-perimetermukul975/Anthropic-Cybersecurity-Skills
- detecting-rdp-brute-force-attacksmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-unusual-service-installationsmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-ntlm-relay-attacksmukul975/Anthropic-Cybersecurity-Skills
- reverse-engineering-malware-with-ghidramukul975/Anthropic-Cybersecurity-Skills
- hunting-for-dns-based-persistencemukul975/Anthropic-Cybersecurity-Skills
- exploiting-smb-vulnerabilities-with-metasploitmukul975/Anthropic-Cybersecurity-Skills
- implementing-google-workspace-admin-securitymukul975/Anthropic-Cybersecurity-Skills
- analyzing-ransomware-leak-site-intelligencemukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-shellbag-artifactsmukul975/Anthropic-Cybersecurity-Skills
- executing-red-team-exercisemukul975/Anthropic-Cybersecurity-Skills
- detecting-dns-exfiltration-with-dns-query-analysismukul975/Anthropic-Cybersecurity-Skills
- hunting-for-dcom-lateral-movementmukul975/Anthropic-Cybersecurity-Skills
- performing-yara-rule-development-for-detectionmukul975/Anthropic-Cybersecurity-Skills
- conducting-domain-persistence-with-dcsyncmukul975/Anthropic-Cybersecurity-Skills
- conducting-phishing-incident-responsemukul975/Anthropic-Cybersecurity-Skills
- achieving-cmmc-level-2-compliancemukul975/Anthropic-Cybersecurity-Skills
- performing-privileged-account-access-reviewmukul975/Anthropic-Cybersecurity-Skills
- monitoring-scada-modbus-traffic-anomaliesmukul975/Anthropic-Cybersecurity-Skills
- configuring-windows-event-logging-for-detectionmukul975/Anthropic-Cybersecurity-Skills
- implementing-cloud-dlp-for-data-protectionmukul975/Anthropic-Cybersecurity-Skills
- performing-csrf-attack-simulationmukul975/Anthropic-Cybersecurity-Skills
- exploiting-zerologon-vulnerability-cve-2020-1472mukul975/Anthropic-Cybersecurity-Skills
- building-red-team-c2-infrastructure-with-havocmukul975/Anthropic-Cybersecurity-Skills
- performing-asset-criticality-scoring-for-vulnsmukul975/Anthropic-Cybersecurity-Skills
- implementing-semgrep-for-custom-sast-rulesmukul975/Anthropic-Cybersecurity-Skills
- red-teaming-llms-with-garakmukul975/Anthropic-Cybersecurity-Skills
- performing-ioc-enrichment-automationmukul975/Anthropic-Cybersecurity-Skills
- detecting-typosquatting-packagesmukul975/Anthropic-Cybersecurity-Skills
- extracting-config-from-agent-tesla-ratmukul975/Anthropic-Cybersecurity-Skills
- detecting-exfiltration-over-dns-with-zeekmukul975/Anthropic-Cybersecurity-Skills
- implementing-continuous-security-validation-with-basmukul975/Anthropic-Cybersecurity-Skills
- performing-sca-dependency-scanning-with-snykmukul975/Anthropic-Cybersecurity-Skills
- abusing-dpapi-for-credential-accessmukul975/Anthropic-Cybersecurity-Skills
- analyzing-supply-chain-malware-artifactsmukul975/Anthropic-Cybersecurity-Skills
- auditing-cloud-with-cis-benchmarksmukul975/Anthropic-Cybersecurity-Skills
- performing-aws-account-enumeration-with-scout-suitemukul975/Anthropic-Cybersecurity-Skills
- implementing-attack-path-analysis-with-xm-cybermukul975/Anthropic-Cybersecurity-Skills
- testing-for-email-header-injectionmukul975/Anthropic-Cybersecurity-Skills
- exploiting-broken-function-level-authorizationmukul975/Anthropic-Cybersecurity-Skills
- auditing-kubernetes-cluster-rbacmukul975/Anthropic-Cybersecurity-Skills
- extracting-browser-history-artifactsmukul975/Anthropic-Cybersecurity-Skills
- performing-mobile-device-forensics-with-cellebritemukul975/Anthropic-Cybersecurity-Skills
- analyzing-android-malware-with-apktoolmukul975/Anthropic-Cybersecurity-Skills
- verifying-build-provenance-with-slsa-sigstoremukul975/Anthropic-Cybersecurity-Skills
- hunting-for-data-exfiltration-indicatorsmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-t1098-account-manipulationmukul975/Anthropic-Cybersecurity-Skills
- configuring-ldap-security-hardeningmukul975/Anthropic-Cybersecurity-Skills
- performing-ssl-certificate-lifecycle-managementmukul975/Anthropic-Cybersecurity-Skills
- building-phishing-reporting-button-workflowmukul975/Anthropic-Cybersecurity-Skills
- performing-wireless-network-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- performing-access-recertification-with-saviyntmukul975/Anthropic-Cybersecurity-Skills
- implementing-file-integrity-monitoring-with-aidemukul975/Anthropic-Cybersecurity-Skills
- implementing-api-key-security-controlsmukul975/Anthropic-Cybersecurity-Skills
- implementing-pod-security-admission-controllermukul975/Anthropic-Cybersecurity-Skills
- detecting-kerberoasting-attacksmukul975/Anthropic-Cybersecurity-Skills
- building-soc-metrics-and-kpi-trackingmukul975/Anthropic-Cybersecurity-Skills
- triaging-security-incidentmukul975/Anthropic-Cybersecurity-Skills
- analyzing-typosquatting-domains-with-dnstwistmukul975/Anthropic-Cybersecurity-Skills
- analyzing-cobaltstrike-malleable-c2-profilesmukul975/Anthropic-Cybersecurity-Skills
- exploiting-websocket-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- configuring-oauth2-authorization-flowmukul975/Anthropic-Cybersecurity-Skills
- implementing-gcp-organization-policy-constraintsmukul975/Anthropic-Cybersecurity-Skills
- implementing-ticketing-system-for-incidentsmukul975/Anthropic-Cybersecurity-Skills
- building-adversary-infrastructure-tracking-systemmukul975/Anthropic-Cybersecurity-Skills
- building-patch-tuesday-response-processmukul975/Anthropic-Cybersecurity-Skills
- implementing-ransomware-kill-switch-detectionmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-network-access-with-zscalermukul975/Anthropic-Cybersecurity-Skills
- collecting-indicators-of-compromisemukul975/Anthropic-Cybersecurity-Skills
- detecting-spearphishing-with-email-gatewaymukul975/Anthropic-Cybersecurity-Skills
- benchmarking-kubernetes-with-kube-benchmukul975/Anthropic-Cybersecurity-Skills
- implementing-mitre-attack-coverage-mappingmukul975/Anthropic-Cybersecurity-Skills
- detecting-aws-credential-exposure-with-trufflehogmukul975/Anthropic-Cybersecurity-Skills
- performing-disk-forensics-investigationmukul975/Anthropic-Cybersecurity-Skills
- exploiting-excessive-data-exposure-in-apimukul975/Anthropic-Cybersecurity-Skills
- detecting-broken-object-property-level-authorizationmukul975/Anthropic-Cybersecurity-Skills
- implementing-threat-intelligence-lifecycle-managementmukul975/Anthropic-Cybersecurity-Skills
- analyzing-certificate-transparency-for-phishingmukul975/Anthropic-Cybersecurity-Skills
- implementing-aws-security-hub-compliancemukul975/Anthropic-Cybersecurity-Skills
- performing-graphql-introspection-attackmukul975/Anthropic-Cybersecurity-Skills
- analyzing-heap-spray-exploitationmukul975/Anthropic-Cybersecurity-Skills
- performing-api-security-testing-with-postmanmukul975/Anthropic-Cybersecurity-Skills
- detecting-qr-code-phishing-with-email-securitymukul975/Anthropic-Cybersecurity-Skills
- building-vulnerability-scanning-workflowmukul975/Anthropic-Cybersecurity-Skills
- performing-ot-vulnerability-assessment-with-clarotymukul975/Anthropic-Cybersecurity-Skills
- implementing-network-traffic-baseliningmukul975/Anthropic-Cybersecurity-Skills
- exploiting-type-juggling-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- generating-threat-intelligence-reportsmukul975/Anthropic-Cybersecurity-Skills
- conducting-external-reconnaissance-with-osintmukul975/Anthropic-Cybersecurity-Skills
- performing-phishing-simulation-with-gophishmukul975/Anthropic-Cybersecurity-Skills
- scanning-kubernetes-manifests-with-kubesecmukul975/Anthropic-Cybersecurity-Skills
- performing-wireless-security-assessment-with-kismetmukul975/Anthropic-Cybersecurity-Skills
- executing-red-team-engagement-planningmukul975/Anthropic-Cybersecurity-Skills
- analyzing-threat-actor-ttps-with-mitre-navigatormukul975/Anthropic-Cybersecurity-Skills
- detecting-t1055-process-injection-with-sysmonmukul975/Anthropic-Cybersecurity-Skills
- implementing-endpoint-dlp-controlsmukul975/Anthropic-Cybersecurity-Skills
- detecting-insider-threat-behaviorsmukul975/Anthropic-Cybersecurity-Skills
- implementing-pam-for-database-accessmukul975/Anthropic-Cybersecurity-Skills
- implementing-dragos-platform-for-ot-monitoringmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-for-saas-applicationsmukul975/Anthropic-Cybersecurity-Skills
- detecting-privilege-escalation-in-kubernetes-podsmukul975/Anthropic-Cybersecurity-Skills
- implementing-conditional-access-policies-azure-admukul975/Anthropic-Cybersecurity-Skills
- performing-web-application-vulnerability-triagemukul975/Anthropic-Cybersecurity-Skills
- performing-windows-artifact-analysis-with-eric-zimmerman-toolsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-sbom-for-supply-chain-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- building-threat-hunt-hypothesis-frameworkmukul975/Anthropic-Cybersecurity-Skills
- implementing-privileged-access-workstationmukul975/Anthropic-Cybersecurity-Skills
- conducting-cloud-penetration-testingmukul975/Anthropic-Cybersecurity-Skills
- detecting-cloud-threats-with-guarddutymukul975/Anthropic-Cybersecurity-Skills
- moving-laterally-with-netexecmukul975/Anthropic-Cybersecurity-Skills
- detecting-container-escape-attemptsmukul975/Anthropic-Cybersecurity-Skills
- deploying-tailscale-for-zero-trust-vpnmukul975/Anthropic-Cybersecurity-Skills
- analyzing-indicators-of-compromisemukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-prefetch-with-pythonmukul975/Anthropic-Cybersecurity-Skills
- implementing-mimecast-targeted-attack-protectionmukul975/Anthropic-Cybersecurity-Skills
- performing-cve-prioritization-with-kev-catalogmukul975/Anthropic-Cybersecurity-Skills
- building-threat-intelligence-platformmukul975/Anthropic-Cybersecurity-Skills
- detecting-beaconing-patterns-with-zeekmukul975/Anthropic-Cybersecurity-Skills
- detecting-network-scanning-with-ids-signaturesmukul975/Anthropic-Cybersecurity-Skills
- performing-nist-csf-maturity-assessmentmukul975/Anthropic-Cybersecurity-Skills
- implementing-cloud-vulnerability-posture-managementmukul975/Anthropic-Cybersecurity-Skills
- conducting-social-engineering-pretext-callmukul975/Anthropic-Cybersecurity-Skills
- detecting-process-injection-techniquesmukul975/Anthropic-Cybersecurity-Skills
- operating-havoc-c2mukul975/Anthropic-Cybersecurity-Skills
- detecting-privilege-escalation-attemptsmukul975/Anthropic-Cybersecurity-Skills
- mapping-mitre-attack-techniquesmukul975/Anthropic-Cybersecurity-Skills
- detecting-insider-data-exfiltration-via-dlpmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-process-injection-techniquesmukul975/Anthropic-Cybersecurity-Skills
- performing-ot-vulnerability-scanning-safelymukul975/Anthropic-Cybersecurity-Skills
- exploiting-prototype-pollution-in-javascriptmukul975/Anthropic-Cybersecurity-Skills
- analyzing-linux-kernel-rootkitsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-linux-elf-malwaremukul975/Anthropic-Cybersecurity-Skills
- performing-service-account-auditmukul975/Anthropic-Cybersecurity-Skills
- bypassing-authentication-with-forced-browsingmukul975/Anthropic-Cybersecurity-Skills
- validating-backup-integrity-for-recoverymukul975/Anthropic-Cybersecurity-Skills
- configuring-aws-verified-access-for-ztnamukul975/Anthropic-Cybersecurity-Skills
- implementing-digital-signatures-with-ed25519mukul975/Anthropic-Cybersecurity-Skills
- deploying-palo-alto-prisma-access-zero-trustmukul975/Anthropic-Cybersecurity-Skills
- analyzing-ransomware-payment-walletsmukul975/Anthropic-Cybersecurity-Skills
- testing-for-open-redirect-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- conducting-gdpr-compliance-assessmentmukul975/Anthropic-Cybersecurity-Skills
- analyzing-threat-intelligence-feedsmukul975/Anthropic-Cybersecurity-Skills
- relaying-ntlm-for-adcs-esc8mukul975/Anthropic-Cybersecurity-Skills
- detecting-fileless-malware-techniquesmukul975/Anthropic-Cybersecurity-Skills
- securing-historian-server-in-ot-environmentmukul975/Anthropic-Cybersecurity-Skills
- analyzing-email-headers-for-phishing-investigationmukul975/Anthropic-Cybersecurity-Skills
- implementing-identity-governance-with-sailpointmukul975/Anthropic-Cybersecurity-Skills
- implementing-log-forwarding-with-fluentdmukul975/Anthropic-Cybersecurity-Skills
- performing-soc2-type2-audit-preparationmukul975/Anthropic-Cybersecurity-Skills
- testing-prompt-injection-in-rag-pipelinesmukul975/Anthropic-Cybersecurity-Skills
- performing-ssl-tls-security-assessmentmukul975/Anthropic-Cybersecurity-Skills
- migrating-to-post-quantum-cryptographymukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-with-hashicorp-boundarymukul975/Anthropic-Cybersecurity-Skills
- hunting-advanced-persistent-threatsmukul975/Anthropic-Cybersecurity-Skills
- extracting-memory-artifacts-with-rekallmukul975/Anthropic-Cybersecurity-Skills
- deploying-cloudflare-access-for-zero-trustmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-standing-privilege-with-cyberarkmukul975/Anthropic-Cybersecurity-Skills
- analyzing-browser-forensics-with-hindsightmukul975/Anthropic-Cybersecurity-Skills
- configuring-multi-factor-authentication-with-duomukul975/Anthropic-Cybersecurity-Skills
- performing-user-behavior-analyticsmukul975/Anthropic-Cybersecurity-Skills
- managing-intelligence-lifecyclemukul975/Anthropic-Cybersecurity-Skills
- implementing-kubernetes-pod-security-standardsmukul975/Anthropic-Cybersecurity-Skills
- building-incident-response-playbookmukul975/Anthropic-Cybersecurity-Skills
- performing-active-directory-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- performing-security-headers-auditmukul975/Anthropic-Cybersecurity-Skills
- auditing-terraform-infrastructure-for-securitymukul975/Anthropic-Cybersecurity-Skills
- performing-container-image-hardeningmukul975/Anthropic-Cybersecurity-Skills
- configuring-windows-defender-advanced-settingsmukul975/Anthropic-Cybersecurity-Skills
- implementing-vulnerability-sla-breach-alertingmukul975/Anthropic-Cybersecurity-Skills
- performing-kubernetes-etcd-security-assessmentmukul975/Anthropic-Cybersecurity-Skills
- performing-blind-ssrf-exploitationmukul975/Anthropic-Cybersecurity-Skills
- analyzing-prefetch-files-for-execution-historymukul975/Anthropic-Cybersecurity-Skills
- implementing-ot-network-traffic-analysis-with-nozomimukul975/Anthropic-Cybersecurity-Skills
- implementing-fuzz-testing-in-cicd-with-aflplusplusmukul975/Anthropic-Cybersecurity-Skills
- hunting-credential-stuffing-attacksmukul975/Anthropic-Cybersecurity-Skills
- validating-tpm-measured-boot-attestationmukul975/Anthropic-Cybersecurity-Skills
- implementing-siem-correlation-rules-for-aptmukul975/Anthropic-Cybersecurity-Skills
- performing-osint-with-spiderfootmukul975/Anthropic-Cybersecurity-Skills
- continuous-llm-red-teaming-with-promptfoomukul975/Anthropic-Cybersecurity-Skills
- implementing-velociraptor-for-ir-collectionmukul975/Anthropic-Cybersecurity-Skills
- implementing-devsecops-security-scanningmukul975/Anthropic-Cybersecurity-Skills
- exploiting-bgp-hijacking-vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-living-off-the-cloud-techniquesmukul975/Anthropic-Cybersecurity-Skills
- implementing-api-rate-limiting-and-throttlingmukul975/Anthropic-Cybersecurity-Skills
- performing-active-directory-compromise-investigationmukul975/Anthropic-Cybersecurity-Skills
- performing-vlan-hopping-attackmukul975/Anthropic-Cybersecurity-Skills
- implementing-patch-management-workflowmukul975/Anthropic-Cybersecurity-Skills
- implementing-kubernetes-network-policy-with-calicomukul975/Anthropic-Cybersecurity-Skills
- implementing-gdpr-data-protection-controlsmukul975/Anthropic-Cybersecurity-Skills
The whole corpus is one call away through the search API, or ask a question of it on the index itself.