GPTsApp SkillsCodex Reset
Menu
Codex Reset

Find a skill for the job.

Compare the method, check the prerequisites, then go to the exact source.

Refine by task, source or prerequisites

Technology mentions are not dependencies. Client filters require scoped documentation, not a runtime compatibility claim. Detailed guides summarize files read at a fixed commit; they are not runtime tests.

8364 matches

Setup shown per result · Runtime not tested
Choose 2–3 sharing a task.Selection guidance uses this directory’s task labels only. It is not runtime compatibility.

  1. detecting-network-anomalies-with-zeek

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-network-anomalies-with-zeek/SKILL.md

    Deploy and configure Zeek (formerly Bro) to passively analyze network traffic, generate structured connection/DNS/HTTP/SSL/file logs, detect anomalous behavior, and write custom scripts (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  2. detecting-network-scanning-with-ids-signatures

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-network-scanning-with-ids-signatures/SKILL.md

    Detect network reconnaissance and port scanning using Suricata and Snort (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  3. detecting-network-scanning-with-ids-signatures

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-network-scanning-with-ids-signatures/SKILL.md

    Detect network reconnaissance and port scanning using Suricata and Snort (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  4. detecting-ntlm-relay-with-event-correlation

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-ntlm-relay-with-event-correlation/SKILL.md

    Detect NTLM relay attacks (T1557.001) by correlating Windows Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB/LDAP signing, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  5. detecting-ntlm-relay-with-event-correlation

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-ntlm-relay-with-event-correlation/SKILL.md

    Detect NTLM relay attacks through Windows Security Event correlation by analyzing Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  6. detecting-oauth-token-theft

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-oauth-token-theft/SKILL.md

    Detects and responds to OAuth token theft and replay attacks in cloud environments, focusing on Microsoft Entra ID (Azure AD) token protection, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  7. detecting-oauth-token-theft

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/detecting-oauth-token-theft/SKILL.md

    Detect and respond to OAuth token theft and replay in Microsoft Entra ID (Azure AD), covering access token theft, refresh token replay, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  8. detecting-pass-the-hash-attacks

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-pass-the-hash-attacks/SKILL.md

    Detect Pass-the-Hash attacks by analyzing NTLM authentication patterns, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  9. detecting-pass-the-hash-attacks

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-pass-the-hash-attacks/SKILL.md

    Detect Pass-the-Hash (T1550.002) attacks by analyzing NTLM authentication patterns, flagging Type 3 logons using NTLM where Kerberos would be expected, and correlating (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  10. detecting-pass-the-ticket-attacks

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-pass-the-ticket-attacks/SKILL.md

    Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  11. detecting-pass-the-ticket-attacks

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-pass-the-ticket-attacks/SKILL.md

    Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns, with detection queries (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  12. detecting-performance-regressions

    skill collectionNo comparison task assigned

    foryourhealth111-pixel/vibe-skillsbundled/skills/detecting-performance-regressions/SKILL.md

    Compare current benchmark results against historical baselines to spot performance regressions. Use as an explicit/manual helper for build-to-build degradation review, not for (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

Snapshot w7-discovery-20260912 · 8364 file observations across 30 repositories. Source collection is not a quality or safety assessment.