mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-08-04 18:00:18 +03:00
Rewrite 548 skill descriptions to the activation rubric
Each rewritten description now states both what the skill does (concrete capability, named tools/artifacts) and an explicit when-to-use trigger, improving agent discovery/activation. Grounded in each skill's own body; changes confined to the `description` field only (bodies and all other frontmatter untouched). Produced by a gated audit->rewrite->recheck loop (548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded). Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
@@ -1,11 +1,6 @@
|
||||
---
|
||||
name: conducting-cloud-incident-response
|
||||
description: 'Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,
|
||||
cloud-native log analysis, resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure.
|
||||
Activates for requests involving cloud incident response, AWS security incident, Azure compromise, GCP breach, cloud forensics,
|
||||
or cloud identity compromise.
|
||||
|
||||
'
|
||||
description: Respond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit Logs), resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure. Use when CSPM alerts or audit logs show compromised cloud credentials, unauthorized IAM changes, or a breach spanning cloud services.
|
||||
domain: cybersecurity
|
||||
subdomain: incident-response
|
||||
tags:
|
||||
|
||||
Reference in New Issue
Block a user