creator/Anthropic-Cybersecurity-Skills
1
0
Fork 0
mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-08-05 10:20:18 +03:00
Code Issues Packages Projects Releases Wiki Activity

Rewrite 548 skill descriptions to the activation rubric

Browse Source 
Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
Mahipal
2026-08-02 09:32:13 -07:00
parent 04a207702e
commit 2fb6a9faff
548 changed files with 2189 additions and 1915 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/detecting-oauth-token-theft/SKILL.md
+1 -8
View File
@@ -1,13 +1,6 @@
---
name: detecting-oauth-token-theft
description: 'Detects and responds to OAuth token theft and replay attacks in cloud
environments, focusing on Microsoft Entra ID (Azure AD) token protection, conditional
access policies, and sign-in anomaly detection. Covers access token theft, refresh
token replay, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Activates
for requests involving OAuth token theft detection, token replay prevention, Azure
AD conditional access token protection, or cloud identity attack investigation.
'
description: Detect and respond to OAuth token theft and replay in Microsoft Entra ID (Azure AD), covering access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, pass-the-cookie attacks, and Token Protection conditional access policies. Use for impossible-travel or anomalous token-usage alerts, suspected session hijacking, sign-in log analysis, or configuring token-binding defenses in Azure/M365.
domain: cybersecurity
subdomain: cloud-security
tags: