Agent skills for OpenAI Agents SDK

Detect malicious inbox/mail-flow forwarding rules that adversaries create to maintain

Detects defense evasion techniques used by adversaries in endpoint logs

Probe a target for accidentally-served secret-bearing files in the web root — .git/, .env, .DS_Store, backup files, database dumps, key…

Detects fileless malware and in-memory attacks that execute entirely

Detect Golden Ticket attacks in Active Directory using Splunk and KQL queries

Detect Kerberos Golden Ticket forgery (e.g.

Implement User and Entity Behavior Analytics (UEBA) using Elasticsearch/OpenSearch

Detect adversary lateral movement across networks using Splunk SPL queries

Detect lateral movement in network traffic using Zeek (formerly Bro)

Detect abuse of legitimate Windows binaries (LOLBins) used for living

Detect Mimikatz credential-dumping activity via command-line pattern matching, LSASS access signatures, binary/hash indicators, and…

Audit Azure Storage accounts for public blob containers, missing encryption, overly permissive SAS tokens, disabled logging, and network…

Detect command injection against Modbus TCP/RTU in ICS/SCADA environments by monitoring unauthorized writes, anomalous function codes…

Detect anomalies in Modbus/TCP and Modbus RTU industrial traffic via function code monitoring, register range validation, timing analysis…

Deploy and configure Zeek (formerly Bro) to passively analyze network traffic, generate structured connection/DNS/HTTP/SSL/file logs…

This skill enables Claude to automatically detect performance regressions in a CI/CD pipeline.

Configures Fail2ban with custom filters and actions to detect port scanning

Detects and prevents privilege escalation inside Kubernetes pods by combining admission control (OPA policies), runtime monitoring…

Detect and prevent QR code phishing (quishing) attacks that embed

Detect RDP brute force attacks by parsing Windows Security Event Logs

Detects and prevents code injection attacks targeting serverless functions