Download

Skill UI

Browse and discover 5987+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search API , found 763 results

Default Newest Most Downloaded

Compromised Cloud Credentials Detection

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by analyzing GuardDuty, Defender for Identity, and SCC alerts alongside log anomalies, impossible travel, and unauthorized provisioning indicators for rapid incident response.

Detect Email Compromise

detecting-email-account-compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyze Microsoft 365 audit logs, inbox rules, sign-in data, and Graph API activity to spot compromised O365 and Google Workspace mailboxes, then report malicious forwarding, impossible travel, suspicious OAuth access, and containment steps.

OAuth Token Theft Detection

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Analyzes OAuth sign-in telemetry via Microsoft Graph and Okta APIs to spot impossible travel, new device patterns, token replay from unusual IPs, and anomalous scope requests, enabling early detection of access token theft.

Process Injection Detection

detecting-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects malicious process injection techniques through memory forensics, Sysmon/API monitoring, and behavioral signals, aiding EDR/SIEM teams in spotting DLL injection, hollowing, APC/thread hijacking, reflective loading, and similar stealthy attacks.

Shadow API Discovery

detecting-shadow-api-endpoints

mukul975/Anthropic-Cybersecurity-Skills

Identifies undocumented or rogue API endpoints by comparing traffic logs and code/configuration data against OpenAPI specs, helping teams inventory shadow APIs and improve governance.

Context7 Documentation Lookup

documentation-lookup

affaan-m/everything-claude-code

Fetches live library/framework documentation from the Context7 MCP, resolving library IDs and querying docs so setup, API, and code questions use up-to-date sources instead of training data.

API Injection Security Testing

exploiting-api-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Automates testing of API endpoints for SQL, NoSQL, OS command, LDAP, and SSRF injection risks by crafting malicious payloads across headers, paths, queries, and bodies to validate input handling and discover misconfigurations.

Broken Function Authorization Testing

exploiting-broken-function-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Detects Broken Function Level Authorization by enumerating admin endpoints, probing with regular user sessions, and validating role enforcement to reveal API privilege escalation paths during penetration tests.

API Excessive Data Exposure

exploiting-excessive-data-exposure-in-api

mukul975/Anthropic-Cybersecurity-Skills

Automates API testing for excessive data exposure by comparing documented schemas with actual responses, scanning for leaked PII or internal fields, and verifying whether UI filtering conceals sensitive outputs; ideal for pentesters assessing microservices, mobile APIs, or GraphQL endpoints.

JWT Algorithm Confusion

exploiting-jwt-algorithm-confusion-attack

mukul975/Anthropic-Cybersecurity-Skills

Toolkit for testing APIs that trust JWT headers, letting you attempt RS256→HS256 downgrades, alg:none bypasses, and kid/jku/x5u injections to probe signature verification and key-confusion vulnerabilities.

Mass Assignment REST Exploit

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

Guide for discovering and exploiting mass assignment flaws in REST APIs, covering workflow from field discovery to automated attacks aimed at privilege escalation, financial tampering, and authorization bypass during API security assessments.

Exploiting Server-Side Requests

exploiting-server-side-request-forgery

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through identifying SSRF entry points, abusing them to reach cloud metadata services, internal APIs, and admin panels with Burp Collaborator, SSRFmap, and curl.

Prev 1 2 3...55 56 575859 60 61 62 63 64 Next

Language