Results for “canary-files”
50 skillsMore results
implementing-honeypot-for-ransomware-detection
Deploys canary files, honeypot shares, and decoy systems to detect ransomware activity at the earliest possible stage.
24.6k · bundle
deploying-decoy-files-for-ransomware-detection
Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time using file integrity monitoring or OS-level watchdogs.
24.6k · bundle
implementing-honeytokens-for-breach-detection
Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers. Uses the Canarytokens API and custom webhook integrations for breach detection.
24.6k · bundle
implementing-deception-based-detection-with-canarytoken
Deploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug tokens, DNS tokens, document tokens, and AWS key tokens.
24.6k · bundle
canary
Post-deploy canary monitoring. (gstack)
0
canary
Post-deploy canary monitoring. Watches the live app for console errors, performance regressions, and page failures using the browse daemon. Takes periodic screenshots, compares against pre-deploy baselines, and alerts on anomalies. Use when: "monitor deploy", "canary", "post-deploy check", "watch production", "verify deploy". (gstack)
0
mermaid-to-proverif
Translates Mermaid sequence diagrams of cryptographic protocols into ProVerif formal verification models (.pv files) for proving security properties like secrecy, authentication, and forward secrecy.
6k · bundle
canary-watch
Monitors a deployed URL after releases to catch regressions in HTTP status, console errors, network failures, performance metrics, content, API health, static assets, and SSE streams.
1
canary-watch
Use this skill to monitor and verify a deployed URL after releases — checks HTTP endpoints, SSE streams, static assets, console errors, and performance regressions after deploys, merges, or dependency upgrades. Smoke / canary / post-deploy verification.
0
implementing-canary-tokens-for-network-intrusion
Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement, with webhook alerting to Slack, Teams, email, or generic HTTP endpoints.
24.6k · bundle
performing-cloud-storage-forensic-acquisition
Perform forensic acquisition and analysis of cloud storage services including Google Drive, OneDrive, Dropbox, and Box by collecting both API-based remote data and local sync client artifacts from endpoint devices.
24.6k · bundle
arr-cli
Manage your Radarr (movies) and Sonarr (TV series) media library from the terminal. Search and browse movies/series, add new content, check calendars, view queue and download history, inspect quality profiles, and trigger searches. Use when the user mentions Radarr, Sonarr, the *arr stack, adding a movie or series, checking the library, finding something to watch, what's in the queue, download history, upcoming releases, media server setup, or movie/TV automation.
28 · bundle
triaging-windows-with-kape
Collect and parse forensic artifacts from Windows systems using KAPE for rapid DFIR triage.
24.6k · bundle
fix
Processes a PR's review comments (Copilot or human), classifies them, applies the fixes that belong, replies to each thread, and pushes. Use whenever the user says "address the review", "fix what Copilot said", "handle the comments", mentions Copilot already reviewed a PR, or passes a PR number/URL with pending reviews — or in Spanish "revisá los comentarios", "arreglá lo que dijo Copilot", "atendé el review".
0
wrangler
Cloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct syntax and best practices. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.
0
file-reference
处理和分析用户上传的文件引用,提取关键信息并提供应用建议。适用于解析@符号引用、自然语言引用、提取短剧策划相关信息
349 · bundle
detecting-container-escape-with-falco-rules
Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.
24.6k · bundle
canary-watch
Monitors a deployed URL for regressions after releases by checking HTTP status, console errors, network failures, performance metrics, content integrity, API health, static assets, and SSE streams.
226k
analyzing-docker-container-forensics
Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
24.6k · bundle
camsnap
Capture frames or clips from RTSP/ONVIF cameras.
0
cleanup
Archives phase directories from completed milestones into versioned archive folders, showing a dry-run summary and moving directories only after confirmation.
1 · bundle
luffy-skill
路飞(少年漫)认知与表达框架(压缩蒸馏):自由宣言、橡胶脑洞战、伙伴羁绊 触发:海贼王 等。虚构;非暴力教唆
9 · bundle
owner-profiling
Build and maintain a structured personal-context portfolio for the project owner — identity, working style, goals, team, decision patterns. Includes both an interview protocol for bootstrapping and observable-signal patterns for incremental refinement. Use to bootstrap an owner profile (interview), to refine an existing profile (target one file), or to incrementally update the profile based on observed patterns from a normal session (the agent watches for signals and proposes additions when evidence accrues).
0 · bundle
bmad-review-adversarial-general
Perform a Cynical Review and produce a findings report. Use when the user requests a critical review of something
1
canary-watch
Use this skill to monitor a deployed URL for regressions after deploys, merges, or dependency upgrades.
1
deploying-honeytokens-and-canarytokens
Deploy honeytokens and canarytokens as decoy artifacts to detect intrusions with near-zero false positives.
24.6k · bundle
detecting-container-runtime-threats-with-falco
Write and deploy Falco rules with the modern eBPF driver to detect container escape, namespace abuse, privileged mounts, and anomalous syscalls at runtime in Kubernetes and Docker.
24.6k · bundle
gov-court-records
Search US federal court opinions, dockets, and judges via CourtListener through an MCP server.
5
deep-dive
Cross-runtime 2-stage pipeline for Claude Code, Codex/OMX, and Gemini/Antigravity/OMA: trace causal hypotheses, inject evidence into deep-interview style requirements crystallization, then hand off to the right runtime planner/executor.
42 · bundle
jellyfin-cli
Query your Jellyfin media server from the terminal — recently added movies and episodes, search across your library, browse libraries, and check server info and stats. Use when the user asks about Jellyfin, media server, movies, TV shows, recently added content, or their media library.
28 · bundle
canary-watch
Use this skill to monitor and verify a deployed URL after releases — checks HTTP endpoints, SSE streams, static assets, console errors, and performance regressions after deploys, merges, or dependency upgrades. Smoke / canary / post-deploy verification.
0
cloud-cf
Operates Cloudflare resources (Workers, Pages, R2, D1, KV) via the wrangler CLI, covering authentication, deployment, and data management commands.
2
christophernolan-perspective
Provides creative advice in the style of director Christopher Nolan, covering visual design, narrative structure, and scene crafting for filmmaking projects.
38 · bundle
secrets-scan
Scan text or a file for accidentally committed secrets (API keys, tokens)
118 · bundle
blog-pipeline
Route one Paperclip child stage of the PLE new-content routine, producing hash-verifiable evidence and a fail-closed handoff.
0