Download

Skill UI

Browse and discover 6932+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Token , found 159 results

Default Newest Most Downloaded

Honeytoken Breach Detection

implementing-honeytokens-for-breach-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys canary tokens and honeytokens across critical systems to trigger alerts via webhook when attackers touch fake AWS credentials, DNS entries, documents, or database records, enabling deception-based early warnings for intrusion detection teams.

Okta SCIM Provisioning Guide

implementing-scim-provisioning-with-okta

mukul975/Anthropic-Cybersecurity-Skills

Automate user lifecycle management by building a SCIM 2.0 API that pairs with Okta for provisioning, deprovisioning, profile updates, and group sync, leveraging Flask/FastAPI and token-based auth to meet security and compliance needs.

Secrets Scanning CI/CD

implementing-secrets-scanning-in-ci-cd

mukul975/Anthropic-Cybersecurity-Skills

Implements automated secrets scanning in CI/CD pipelines by integrating gitleaks and trufflehog so leaking API keys, tokens or passwords are detected and blocked before deployments across GitHub Actions, GitLab CI, or Jenkins.

AiTM Phishing Detection

performing-adversary-in-the-middle-phishing-detection

mukul975/Anthropic-Cybersecurity-Skills

A workflow for detecting and responding to Adversary-in-the-Middle phishing attacks that swipe credentials/MFA tokens via reverse-proxy kits, with guidance for hardening MFA, conditional access, and logging.

CSRF Attack Simulation

performing-csrf-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates CSRF attacks during authorized penetration tests to exercise state-changing endpoints, evaluate anti-CSRF tokens, SameSite cookies, and header checks, then craft PoCs via Burp Suite for remediation insight.

Deception Technology Deployment

performing-deception-technology-deployment

mukul975/Anthropic-Cybersecurity-Skills

Deploys deception technology such as honeypots, honeytokens, Canary devices, and decoy documents across critical segments to alert SOC teams when attackers bypass perimeter defenses and attempt lateral movement, credential abuse, or internal reconnaissance.

Hardware Security Module Integration

performing-hardware-security-module-integration

mukul975/Anthropic-Cybersecurity-Skills

Guide for integrating Hardware Security Modules via PKCS#11—covering slot/token discovery, key creation, signing, verification, and compliance reporting with python-pkcs11, AWS CloudHSM, and YubiHSM2 in security assessments or audits.

EvilGinx3 Initial Access

performing-initial-access-with-evilginx3

mukul975/Anthropic-Cybersecurity-Skills

Use EvilGinx3 to carry out authorized initial-access phishing, deploy custom phishlets, and intercept session tokens so red teams can demonstrate MFA bypass through MiTM session hijacking during security assessments.

JWT None Attack Testing

performing-jwt-none-algorithm-attack

mukul975/Anthropic-Cybersecurity-Skills

Provides steps and tooling for intercepting JWTs, crafting tokens with the alg header set to none, and submitting forged privileged claims to verify whether a service improperly skips signature verification during authorized security testing.

OAuth Scope Minimization

performing-oauth-scope-minimization-review

mukul975/Anthropic-Cybersecurity-Skills

Performs OAuth 2.0 scope minimization reviews by inventorying service principals, delegated grants, and app role assignments to flag excessive permissions, risky consent patterns, and unused token grants across identity providers and SaaS integrations.

Secure GitHub Actions Workflows

securing-github-actions-workflows

mukul975/Anthropic-Cybersecurity-Skills

Guides DevSecOps teams to harden GitHub Actions by pinning actions to SHAs, restricting GITHUB_TOKEN permissions, guarding secrets, avoiding script injection, and enforcing workflow change approvals.

API Authentication Testing

testing-api-authentication-weaknesses

mukul975/Anthropic-Cybersecurity-Skills

Scans REST API authentication paths to detect missing enforcement, weak JWT handling, insecure API key storage, and session flaws before deployment. Runs unauthenticated probes, token analysis, and credential stuffing attempts to spot OWASP API2 broken authentication risks.

Prev 1 2 3...8 9 101112 13 14 Next

Language