mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-06-15 15:34:56 +03:00

Files

T

mukul975 27c6414ca5 Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills

Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders

2026-03-10 21:02:12 +01:00

1.9 KiB

Raw Blame History

API Reference: Azure AD PIM Audit Agent

Dependencies

Library	Version	Purpose
requests	>=2.28	HTTP client for Microsoft Graph API

CLI Usage

python scripts/agent.py \
  --tenant-id YOUR_TENANT_ID \
  --client-id YOUR_CLIENT_ID \
  --client-secret YOUR_SECRET \
  --output-dir /reports/ \
  --output pim_report.json

Functions

`PIMClient(tenant_id, client_id, client_secret)`

Authenticates via OAuth2 client credentials flow to Microsoft Graph API.

`list_role_definitions() -> list`

GET /roleManagement/directory/roleDefinitions - Available directory roles.

`list_eligible_assignments() -> list`

GET /roleManagement/directory/roleEligibilityScheduleInstances - PIM eligible roles.

`list_active_assignments() -> list`

GET /roleManagement/directory/roleAssignmentScheduleInstances - Active assignments.

`list_role_settings() -> list`

GET /policies/roleManagementPolicyAssignments - PIM policy configurations.

`audit_permanent_assignments(active, eligible) -> list`

Identifies permanent role assignments not managed via PIM eligible workflow.

`compute_pim_coverage(active, eligible) -> dict`

Calculates percentage of assignments managed through PIM.

Microsoft Graph Endpoints

Endpoint	Purpose
`POST /oauth2/v2.0/token`	Client credentials auth
`GET /roleManagement/directory/roleDefinitions`	Role catalog
`GET /roleManagement/directory/roleEligibilityScheduleInstances`	Eligible assignments
`GET /roleManagement/directory/roleAssignmentScheduleInstances`	Active assignments

Output Schema

{
  "coverage": {"active_assignments": 15, "eligible_assignments": 42, "pim_coverage_pct": 73.7},
  "permanent_assignments": [{"role": "Global Administrator", "recommendation": "Convert to eligible"}],
  "recommendations": ["Convert 5 permanent assignments to PIM-eligible"]
}

1.9 KiB Raw Blame History

API Reference: Azure AD PIM Audit Agent

Dependencies

CLI Usage

Functions

PIMClient(tenant_id, client_id, client_secret)

list_role_definitions() -> list

list_eligible_assignments() -> list

list_active_assignments() -> list

list_role_settings() -> list

audit_permanent_assignments(active, eligible) -> list

compute_pim_coverage(active, eligible) -> dict