creator/Anthropic-Cybersecurity-Skills
1
0
Fork 0
mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-08-03 09:20:18 +03:00
Code Issues Packages Projects Releases Wiki Activity

Rewrite 548 skill descriptions to the activation rubric

Browse Source 
Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
Mahipal
2026-08-02 09:32:13 -07:00
parent 04a207702e
commit 2fb6a9faff
548 changed files with 2189 additions and 1915 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/detecting-modbus-protocol-anomalies/SKILL.md
+1 -8
View File
@@ -1,13 +1,6 @@
---
name: detecting-modbus-protocol-anomalies
description: 'This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications
in industrial control systems. It addresses function code monitoring, register range
validation, timing analysis, unauthorized client detection, and deep packet inspection
for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers,
Suricata IDS with OT rules, and custom Python-based detection using Markov chain
models for normal Modbus transaction sequences.
'
description: Detect anomalies in Modbus/TCP and Modbus RTU industrial traffic via function code monitoring, register range validation, timing analysis, and deep packet inspection, using Zeek's Modbus analyzer, Suricata IDS with OT rules, and Python Markov chain models of normal transaction sequences. Use for deploying Modbus IDS in OT environments, baselining polling patterns, investigating suspicious Modbus traffic, or building function code allowlists.
domain: cybersecurity
subdomain: ot-ics-security
tags: