mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-08-03 17:30:19 +03:00
Rewrite 548 skill descriptions to the activation rubric
Each rewritten description now states both what the skill does (concrete capability, named tools/artifacts) and an explicit when-to-use trigger, improving agent discovery/activation. Grounded in each skill's own body; changes confined to the `description` field only (bodies and all other frontmatter untouched). Produced by a gated audit->rewrite->recheck loop (548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded). Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
@@ -1,10 +1,10 @@
|
||||
---
|
||||
name: detecting-rootkit-activity
|
||||
description: 'Detects rootkit presence on compromised systems by identifying hidden
|
||||
processes, hooked system calls, modified kernel structures, hidden files, and covert
|
||||
network connections using memory forensics, cross-view detection, and integrity
|
||||
checking techniques. Activates for requests involving rootkit detection, hidden
|
||||
process discovery, kernel integrity checking, or system call hook analysis.
|
||||
processes, hooked system calls, modified kernel structures, and covert network
|
||||
connections using Volatility memory forensics, cross-view detection, and tools
|
||||
like GMER, rkhunter, chkrootkit, and RootkitRevealer. Use when standard tools
|
||||
(Task Manager, netstat, AV/EDR) show nothing abnormal but compromise is suspected.
|
||||
|
||||
'
|
||||
domain: cybersecurity
|
||||
|
||||
Reference in New Issue
Block a user