Rewrite 548 skill descriptions to the activation rubric

Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
Mahipal
2026-08-02 09:32:13 -07:00
parent 04a207702e
commit 2fb6a9faff
548 changed files with 2189 additions and 1915 deletions
@@ -1,8 +1,11 @@
---
name: detecting-shadow-it-cloud-usage
description: Detect unauthorized SaaS and cloud service usage (shadow IT) by analyzing
proxy logs, DNS query logs, and netflow data using Python pandas for traffic pattern
analysis and domain classification.
description: Detect unauthorized SaaS and cloud service usage (shadow IT) by parsing
proxy access logs, DNS query logs, and firewall/netflow data with Python pandas
to aggregate traffic by domain, classify domains against known SaaS categories,
and score risk by data volume and user count. Use when auditing an organization
for unsanctioned cloud/SaaS usage or generating a shadow IT discovery report
with remediation recommendations.
domain: cybersecurity
subdomain: cloud-security
tags: