Complete folder anatomy for all 649 cybersecurity skills + update LICENSE to Mahipal

- Add scripts/agent.py and references/api-reference.md to all remaining skills
- Update all 648 LICENSE files: copyright now reads 'Mahipal'
- Add implementing-security-monitoring-with-datadog (new skill with full anatomy)
- All 649 skills now have: SKILL.md, LICENSE, scripts/agent.py, references/api-reference.md

skills/configuring-zscaler-private-access-for-ztna/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2025 Anthropic Agent Skills Contributors
+Copyright (c) 2025 Mahipal
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

skills/configuring-zscaler-private-access-for-ztna/references/api-reference.md

@@ -0,0 +1,35 @@
+# Zscaler Private Access ZTNA — API Reference
+
+## Libraries
+
+| Library | Install | Purpose |
+|---------|---------|---------|
+| requests | `pip install requests` | ZPA REST API client |
+| zscaler-sdk-python | `pip install zscaler-sdk-python` | Official Zscaler Python SDK |
+
+## ZPA API Endpoints
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| POST | `/signin` | Authenticate and get bearer token |
+| GET | `/mgmtconfig/v1/admin/customers/{id}/application` | List app segments |
+| GET | `/mgmtconfig/v1/admin/customers/{id}/connector` | List app connectors |
+| GET | `/mgmtconfig/v1/admin/customers/{id}/serverGroup` | List server groups |
+| GET | `/mgmtconfig/v1/admin/customers/{id}/policySet/rules` | List access policies |
+| GET | `/mgmtconfig/v1/admin/customers/{id}/segmentGroup` | List segment groups |
+
+## Key ZPA Concepts
+
+| Component | Description |
+|-----------|-------------|
+| App Segment | Application definition with domain/IP and port ranges |
+| App Connector | On-premise agent that brokers connections to apps |
+| Server Group | Group of application servers behind connectors |
+| Access Policy | Rules defining who can access which app segments |
+| Segment Group | Logical grouping of app segments |
+
+## External References
+
+- [ZPA API Documentation](https://help.zscaler.com/zpa/api)
+- [Zscaler SDK Python](https://github.com/zscaler/zscaler-sdk-python)
+- [ZPA Admin Guide](https://help.zscaler.com/zpa)

skills/configuring-zscaler-private-access-for-ztna/scripts/agent.py

@@ -0,0 +1,127 @@
+#!/usr/bin/env python3
+"""Zscaler Private Access (ZPA) ZTNA audit agent using ZPA API."""
+
+import json
+import sys
+import argparse
+from datetime import datetime
+
+try:
+    import requests
+except ImportError:
+    print("Install: pip install requests")
+    sys.exit(1)
+
+
+class ZPAClient:
+    """Zscaler Private Access API client."""
+
+    def __init__(self, client_id, client_secret, customer_id):
+        self.base_url = "https://config.private.zscaler.com"
+        self.customer_id = customer_id
+        self.token = self._authenticate(client_id, client_secret)
+
+    def _authenticate(self, client_id, client_secret):
+        resp = requests.post(f"{self.base_url}/signin", json={
+            "client_id": client_id, "client_secret": client_secret,
+        })
+        resp.raise_for_status()
+        return resp.json()["token"]
+
+    def _get(self, endpoint):
+        resp = requests.get(f"{self.base_url}/mgmtconfig/v1/admin/customers/{self.customer_id}/{endpoint}",
+                            headers={"Authorization": f"Bearer {self.token}"})
+        resp.raise_for_status()
+        return resp.json()
+
+    def list_app_segments(self):
+        return self._get("application")
+
+    def list_server_groups(self):
+        return self._get("serverGroup")
+
+    def list_app_connectors(self):
+        return self._get("connector")
+
+    def list_access_policies(self):
+        return self._get("policySet/rules")
+
+    def list_segment_groups(self):
+        return self._get("segmentGroup")
+
+
+def audit_zpa_config(client):
+    """Audit ZPA configuration for security posture."""
+    findings = []
+    apps = client.list_app_segments()
+    for app in apps.get("list", []):
+        if not app.get("enabled"):
+            findings.append({
+                "type": "disabled_app_segment",
+                "name": app.get("name", ""),
+                "severity": "LOW",
+            })
+        if app.get("bypassType") == "ALWAYS":
+            findings.append({
+                "type": "bypass_enabled",
+                "name": app.get("name", ""),
+                "severity": "HIGH",
+                "recommendation": "Remove bypass to enforce ZPA inspection",
+            })
+    connectors = client.list_app_connectors()
+    for conn in connectors.get("list", []):
+        if conn.get("runtimeStatus") != "running":
+            findings.append({
+                "type": "connector_down",
+                "name": conn.get("name", ""),
+                "status": conn.get("runtimeStatus", ""),
+                "severity": "CRITICAL",
+            })
+    return findings
+
+
+def run_audit(client_id, client_secret, customer_id):
+    """Execute ZPA ZTNA audit."""
+    client = ZPAClient(client_id, client_secret, customer_id)
+    print(f"\n{'='*60}")
+    print(f"  ZSCALER PRIVATE ACCESS ZTNA AUDIT")
+    print(f"  Generated: {datetime.utcnow().isoformat()} UTC")
+    print(f"{'='*60}\n")
+
+    apps = client.list_app_segments()
+    app_list = apps.get("list", [])
+    print(f"--- APPLICATION SEGMENTS ({len(app_list)}) ---")
+    for a in app_list[:10]:
+        print(f"  {a.get('name', '')}: enabled={a.get('enabled', '')} bypass={a.get('bypassType', '')}")
+
+    connectors = client.list_app_connectors()
+    conn_list = connectors.get("list", [])
+    print(f"\n--- APP CONNECTORS ({len(conn_list)}) ---")
+    for c in conn_list[:10]:
+        print(f"  {c.get('name', '')}: {c.get('runtimeStatus', '')}")
+
+    findings = audit_zpa_config(client)
+    print(f"\n--- AUDIT FINDINGS ({len(findings)}) ---")
+    for f in findings:
+        print(f"  [{f['severity']}] {f['type']}: {f.get('name', '')}")
+
+    return {"apps": len(app_list), "connectors": len(conn_list), "findings": findings}
+
+
+def main():
+    parser = argparse.ArgumentParser(description="ZPA ZTNA Audit Agent")
+    parser.add_argument("--client-id", required=True, help="ZPA API client ID")
+    parser.add_argument("--client-secret", required=True, help="ZPA API client secret")
+    parser.add_argument("--customer-id", required=True, help="ZPA customer ID")
+    parser.add_argument("--output", help="Save report to JSON file")
+    args = parser.parse_args()
+
+    report = run_audit(args.client_id, args.client_secret, args.customer_id)
+    if args.output:
+        with open(args.output, "w") as f:
+            json.dump(report, f, indent=2, default=str)
+        print(f"\n[+] Report saved to {args.output}")
+
+
+if __name__ == "__main__":
+    main()