Rewrite 548 skill descriptions to the activation rubric

Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
Mahipal
2026-08-02 09:32:13 -07:00
parent 04a207702e
commit 2fb6a9faff
548 changed files with 2189 additions and 1915 deletions
@@ -1,11 +1,10 @@
---
name: analyzing-bootkit-and-rootkit-samples
description: 'Analyzes bootkit and advanced rootkit malware that infects the Master
Boot Record (MBR), Volume Boot Record (VBR), or UEFI firmware to gain persistence
below the operating system. Covers boot sector analysis, UEFI module inspection,
and anti-rootkit detection techniques. Activates for requests involving bootkit
analysis, MBR malware investigation, UEFI persistence analysis, or pre-OS malware
detection.
description: 'Analyzes bootkit and advanced rootkit malware infecting the Master
Boot Record (MBR), Volume Boot Record (VBR), or UEFI firmware for below-OS persistence,
covering boot sector analysis, UEFI module inspection, and anti-rootkit detection.
Use when compromise survives OS reinstallation or antivirus/EDR fails to detect
malware despite clear infection signs.
'
domain: cybersecurity