creator/Anthropic-Cybersecurity-Skills
1
0
Fork 0
mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-08-04 09:50:19 +03:00
Code Issues Packages Projects Releases Wiki Activity

Rewrite 548 skill descriptions to the activation rubric

Browse Source 
Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
Mahipal
2026-08-02 09:32:13 -07:00
parent 04a207702e
commit 2fb6a9faff
548 changed files with 2189 additions and 1915 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/implementing-network-traffic-analysis-with-arkime/SKILL.md
+5 -5
View File
@@ -1,10 +1,10 @@
---
name: implementing-network-traffic-analysis-with-arkime
description: Deploy and query Arkime (formerly Moloch) for full packet capture network
traffic analysis. Uses the Arkime API v3 to search sessions, download PCAPs, analyze
connection patterns, detect beaconing behavior, and identify suspicious network
flows. Monitors DNS queries, HTTP traffic, and TLS certificate anomalies across
captured traffic.
description: Queries Arkime (formerly Moloch) full packet capture via its API to search sessions,
download PCAPs, detect C2 beaconing through connection interval/jitter stats,
spot DNS tunneling via query-length analysis, and flag known-bad TLS certificate
issuers, using the bundled scripts/agent.py. Use when investigating suspicious
network flows or doing full-packet-capture forensics against an Arkime deployment.
domain: cybersecurity
subdomain: network-security
tags: