← all publishers

micsapp

@micsapp source repo

Report this profile Claim this profile

• 3.2k skills
• 0 followers
• 3 repo stars
• last month last updated

1. ▌
   Rabbitmq Queue Setup · micsapp

   Configure rabbitmq queue setup operations. Auto-activating skill for Backend Development. Triggers on: rabbitmq queue setup, rabbitmq queue setup Part of the Backend Development skill category. Use when working with rabbitmq queue setup functionality. Trigger with phrases like "rabbitmq queue setup", "rabbitmq setup", "rabbitmq".
   3 repo stars
2. ▌
   Hyperparameter Tuner · micsapp

   Manage hyperparameter tuner operations. Auto-activating skill for ML Training. Triggers on: hyperparameter tuner, hyperparameter tuner Part of the ML Training skill category. Use when working with hyperparameter tuner functionality. Trigger with phrases like "hyperparameter tuner", "hyperparameter tuner", "hyperparameter".
   3 repo stars
3. ▌
   Optuna Study Creator · micsapp

   Create optuna study creator operations. Auto-activating skill for ML Training. Triggers on: optuna study creator, optuna study creator Part of the ML Training skill category. Use when working with optuna study creator functionality. Trigger with phrases like "optuna study creator", "optuna creator", "optuna".
   3 repo stars
4. ▌
   Metric Calculator · micsapp

   Configure and manage - Calculate metric calculator operations. Auto-activating skill for Data Analytics. Triggers on: metric calculator, metric calculator Part of the Data Analytics skill category. Use when working with metric calculator functionality. Trigger with phrases like "metric calculator", "metric calculator", "metric".
   3 repo stars
5. ▌
   Excalidraw MCP Diagramming · micsapp bundle

   Create and edit diagrams on a live Excalidraw canvas using the Excalidraw MCP server. Use when asked to draw, diagram, sketch, or visualise architectures, workflows, data flows, system designs, flowcharts, mind maps, or sequence diagrams. Trigger phrases include "create an excalidraw", "draw me a diagram", "make a flowchart", "visualise the system", "diagram this architecture", "export to PNG/SVG". Can export to PNG, SVG, .excalidraw file, or a shareable URL. Do NOT use for Draw.io or diagrams.net output (use drawio-mcp-diagramming instead).
   3 repo stars
6. ▌
   Terraform Provider Upgrade · micsapp bundle

   Safe Terraform provider upgrades with automatic resource migration, breaking change detection, and state management using moved blocks. Use when upgrading provider versions, handling removed resources, migrating deprecated syntax, or performing major version upgrades.
   3 repo stars
7. ▌
   Analyzing Active Directory Acl Abuse · micsapp bundle

   Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
   3 repo stars
8. ▌
   Analyzing Docker Container Forensics · micsapp bundle

   Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
   3 repo stars
9. ▌
   Analyzing Golang Malware With Ghidra · micsapp bundle

   Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.
   3 repo stars
10. ▌
    Analyzing Malicious Url With Urlscan · micsapp bundle

    URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolat
    3 repo stars
11. ▌
    Analyzing Network Packets With Scapy · micsapp bundle

    Craft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security testing
    3 repo stars
12. ▌
    Analyzing Network Traffic Of Malware · micsapp bundle

    Analyzes network traffic generated by malware during sandbox execution or live incident response to identify C2 protocols, data exfiltration channels, payload downloads, and lateral movement patterns using Wireshark, Zeek, and Suricata. Activates for requests involving malware network analysis, C2 traffic decoding, malware PCAP analysis, or network-based malware detection.
    3 repo stars
13. ▌
    Analyzing Ransomware Payment Wallets · micsapp bundle

    Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor, WalletExplorer, and blockchain.com APIs. Identifies wallet clusters, tracks fund movement through mixers and exchanges, and supports law enforcement attribution. Activates for requests involving ransomware payment tracing, bitcoin wallet analysis, cryptocurrency forensics, or blockchain intelligence gathering.
    3 repo stars
14. ▌
    Analyzing Threat Landscape With Misp · micsapp bundle

    Analyze the threat landscape using MISP (Malware Information Sharing Platform) by querying event statistics, attribute distributions, threat actor galaxy clusters, and tag trends over time. Uses PyMISP to pull event data, compute IOC type breakdowns, identify top threat actors and malware families, and generate threat landscape reports with temporal trends.
    3 repo stars
15. ▌
    Analyzing Windows Shellbag Artifacts · micsapp bundle

    Analyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags Explorer.
    3 repo stars
16. ▌
    Building Incident Response Dashboard · micsapp bundle

    Builds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadership with situational awareness during active incidents, tracking affected systems, containment status, IOC spread, and response timeline. Use when IR teams need unified visibility during incident coordination and post-incident reporting.
    3 repo stars
17. ▌
    Building Soc Playbook For Ransomware · micsapp bundle

    Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication, and recovery phases with specific SIEM queries, isolation procedures, and decision trees. Use when SOC teams need formalized response procedures for ransomware incidents aligned to NIST SP 800-61 and MITRE ATT&CK ransomware techniques.
    3 repo stars
18. ▌
    Conducting Cloud Penetration Testing · micsapp bundle

    This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCP cloud environments. It covers understanding the shared responsibility model for testing scope, leveraging cloud-specific attack tools like Pacu and ScoutSuite, exploiting IAM misconfigurations, testing for SSRF to cloud metadata services, and reporting findings aligned to MITRE ATT&CK Cloud matrix.
    3 repo stars
19. ▌
    Conducting Malware Incident Response · micsapp bundle

    Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing eradication procedures. Covers the full lifecycle from detection through containment, analysis, removal, and recovery. Activates for requests involving malware response, malware eradication, trojan removal, worm containment, malware triage, or infected endpoint remediation.
    3 repo stars
20. ▌
    Deploying Edr Agent With Crowdstrike · micsapp bundle

    Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threat detection, behavioral analysis, and automated response. Use when onboarding endpoints to EDR coverage, configuring detection policies, or integrating Falcon telemetry with SIEM platforms. Activates for requests involving CrowdStrike deployment, Falcon sensor installation, EDR policy configuration, or endpoint detection and response.
    3 repo stars
21. ▌
    Deploying Software Defined Perimeter · micsapp bundle

    Deploy a Software-Defined Perimeter using the CSA v2.0 specification with Single Packet Authorization, mutual TLS, and SDP controller/gateway configuration to enforce zero trust network access.
    3 repo stars
22. ▌
    Detecting Container Drift At Runtime · micsapp bundle

    Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.
    3 repo stars
23. ▌
    Detecting Lateral Movement With Zeek · micsapp bundle

    Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, Pass-the-Hash activity, remote service execution, and anomalous internal connections.
    3 repo stars
24. ▌
    Detecting SQL Injection Via Waf Logs · micsapp bundle

    Analyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to identify SQLi patterns (UNION SELECT, OR 1=1, SLEEP(), BENCHMARK()), tracks attack sources, correlates multi-stage injection attempts, and generates incident reports with OWASP classification.
    3 repo stars
25. ▌
    Exploiting SQL Injection With Sqlmap · micsapp bundle

    Detecting and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.
    3 repo stars
26. ▌
    Exploiting Websocket Vulnerabilities · micsapp bundle

    Testing WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.
    3 repo stars
27. ▌
    Extracting Browser History Artifacts · micsapp bundle

    Extract and analyze browser history, cookies, cache, downloads, and bookmarks from Chrome, Firefox, and Edge for forensic evidence of user web activity.
    3 repo stars
28. ▌
    Extracting Iocs From Malware Samples · micsapp bundle

    Extracts indicators of compromise (IOCs) from malware samples including file hashes, network indicators (IPs, domains, URLs), host artifacts (file paths, registry keys, mutexes), and behavioral patterns for threat intelligence sharing and detection rule creation. Activates for requests involving IOC extraction, threat indicator harvesting, malware indicator collection, or building detection content from samples.
    3 repo stars
29. ▌
    Hunting For Lateral Movement Via Wmi · micsapp bundle

    Detect WMI-based lateral movement by analyzing Windows Event ID 4688 process creation and Sysmon Event ID 1 for WmiPrvSE.exe child process patterns, remote process execution, and WMI event subscription persistence.
    3 repo stars
30. ▌
    Hunting For Spearphishing Indicators · micsapp bundle

    Hunt for spearphishing campaign indicators across email logs, endpoint telemetry, and network data to detect targeted email attacks.
    3 repo stars
31. ▌
    Implementing Alert Fatigue Reduction · micsapp bundle

    Implements strategies to reduce SOC alert fatigue by tuning detection rules, consolidating duplicate alerts, implementing risk-based alerting, and measuring alert quality metrics to maintain analyst effectiveness and prevent critical alert dismissal. Use when SOC teams face overwhelming alert volumes, high false positive rates, or declining analyst performance.
    3 repo stars
32. ▌
    Implementing Pam For Database Access · micsapp bundle

    Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL. Covers session proxy configuration, credential vaulting, query auditing, dynamic credentia
    3 repo stars
33. ▌
    Implementing Rsa Key Pair Management · micsapp bundle

    RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating,
    3 repo stars
34. ▌
    Performing Container Image Hardening · micsapp bundle

    This skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure production-ready images.
    3 repo stars
35. ▌
    Performing Firmware Malware Analysis · micsapp bundle

    Analyzes firmware images for embedded malware, backdoors, and unauthorized modifications targeting routers, IoT devices, UEFI/BIOS, and embedded systems. Covers firmware extraction, filesystem analysis, binary reverse engineering, and bootkit detection. Activates for requests involving firmware security analysis, IoT malware investigation, UEFI rootkit detection, or embedded device compromise assessment.
    3 repo stars
36. ▌
    Performing Ioc Enrichment Automation · micsapp bundle

    Automates Indicator of Compromise (IOC) enrichment by orchestrating lookups across VirusTotal, AbuseIPDB, Shodan, MISP, and other intelligence sources to provide contextual scoring and disposition recommendations. Use when SOC analysts need rapid multi-source enrichment of IPs, domains, URLs, and file hashes during alert triage or incident investigation.
    3 repo stars
37. ▌
    Performing JWT None Algorithm Attack · micsapp bundle

    Execute and test the JWT none algorithm attack to bypass signature verification by manipulating the alg header field in JSON Web Tokens.
    3 repo stars
38. ▌
    Performing Privacy Impact Assessment · micsapp bundle

    Automates the Privacy Impact Assessment (PIA) workflow including data flow mapping, privacy risk scoring matrices, GDPR Article 35 DPIA and CCPA/CPRA alignment checks, data inventory cataloging, and remediation tracking. Implements the NIST Privacy Framework PRAM methodology and ICO DPIA guidance for systematic identification and mitigation of privacy risks across processing activities. Use when conducting privacy assessments for new systems, evaluating regulatory compliance posture, or building automated privacy governance programs.
    3 repo stars
39. ▌
    Performing Sqlite Database Forensics · micsapp bundle

    Perform forensic analysis of SQLite databases to recover deleted records from freelists and WAL files, decode encoded timestamps, and extract evidence from browser history, messaging apps, and mobile device databases.
    3 repo stars
40. ▌
    Scanning Container Images With Grype · micsapp bundle

    Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.
    3 repo stars
41. ▌
    Tracking Threat Actor Infrastructure · micsapp bundle

    Threat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control (C2) servers, phishing domains, exploit kit hosts, bulletproof hosting, a
    3 repo stars
42. ▌
    Methodology Curator · micsapp bundle

    Surfaces expert frameworks and proven methodologies before creating OR evaluating skills, hooks, agents, or commands. Helps select approaches from domain masters. Use when starting creation workflows, evaluating methodology gaps, or seeking domain expertise. Do not use if you already have a specific methodology or are fixing syntax/structural issues.
    3 repo stars
43. ▌
    Project Brainstorming · micsapp

    Guide project ideation through Socratic questioning and constraint analysis for actionable project briefs. Use for starting projects, exploring problems, comparing approaches, feasibility. Skip if requirements are clear.
    3 repo stars
44. ▌
    Project Specification · micsapp

    Transform project briefs into testable specifications with acceptance criteria. Use for requirements translation, spec creation, pre-implementation. Skip if spec exists or still exploring.
    3 repo stars
45. ▌
    Cpu Gpu Performance · micsapp

    Use this skill BEFORE resource-intensive operations. Establish baselines proactively. location: plugin token_budget: 400. Use when session starts (auto-load with token-conservation), planning builds or training that could pin CPUs/GPUs for >1 minute, retrying failed resource-heavy commands. Do not use when simple operations with no resource impact. DO NOT use when: quick single-file operations.
    3 repo stars
46. ▌
    Content Sanitization · micsapp

    Sanitization guidelines for external content consumed by skills and hooks. Use when loading external content (GitHub Issues, PRs, Discussions), processing WebFetch/WebSearch results, or any workflow consuming untrusted input.
    3 repo stars
47. ▌
    Evaluation Framework · micsapp bundle

    Consult this skill when building evaluation or scoring systems. Use when implementing evaluation systems, creating quality gates, designing scoring rubrics, building decision frameworks. Do not use when simple pass/fail without scoring needs.
    3 repo stars
48. ▌
    Review Chamber · micsapp bundle

    Capture and retrieve PR review knowledge in project memory palaces.
    3 repo stars
49. ▌
    Git Workspace Review · micsapp bundle

    Use this skill as foundation for git workflows. Use when verifying workspace state before other git operations, checking staged changes, preflight checks before commits or PRs. Do not use when full commit workflow - use commit-messages instead. DO NOT use when: full PR preparation - use pr-prep.
    3 repo stars
50. ▌
    Workflow Improvement · micsapp bundle

    Retrospective workflow evaluation and improvement of skills, agents, commands, and hooks. workflow improvement, retrospective, workflow efficiency Use when: workflow felt slow, confusing, or needs optimization DO NOT use when: simple one-off fixes - use fix-pr or do-issue instead.
    3 repo stars
51. ▌
    History Insight · micsapp bundle

    This skill should be used when user wants to access, capture, or reference Claude Code session history. Trigger when user says "capture session", "save session history", or references past/current conversation as a source - whether for saving, extracting, summarizing, or reviewing. This includes any mention of "what we discussed", "today's work", "session history", or when user treats the conversation itself as source material (e.g., "from our conversation").
    3 repo stars
52. ▌
    CSS Module Generator · micsapp

    Generate css module generator operations. Auto-activating skill for Frontend Development. Triggers on: css module generator, css module generator Part of the Frontend Development skill category. Use when working with css module generator functionality. Trigger with phrases like "css module generator", "css generator", "css".
    3 repo stars
53. ▌
    Django View Generator · micsapp

    Generate django view generator operations. Auto-activating skill for Backend Development. Triggers on: django view generator, django view generator Part of the Backend Development skill category. Use when working with django view generator functionality. Trigger with phrases like "django view generator", "django generator", "django".
    3 repo stars
54. ▌
    Mlflow Tracking Setup · micsapp

    Configure mlflow tracking setup operations. Auto-activating skill for ML Training. Triggers on: mlflow tracking setup, mlflow tracking setup Part of the ML Training skill category. Use when working with mlflow tracking setup functionality. Trigger with phrases like "mlflow tracking setup", "mlflow setup", "mlflow".
    3 repo stars
55. ▌
    Pytorch Model Trainer · micsapp

    Build pytorch model trainer operations. Auto-activating skill for ML Training. Triggers on: pytorch model trainer, pytorch model trainer Part of the ML Training skill category. Use when working with pytorch model trainer functionality. Trigger with phrases like "pytorch model trainer", "pytorch trainer", "pytorch".
    3 repo stars
56. ▌
    Aggregation Helper · micsapp

    Configure with aggregation helper operations. Auto-activating skill for Data Analytics. Triggers on: aggregation helper, aggregation helper Part of the Data Analytics skill category. Use when working with aggregation helper functionality. Trigger with phrases like "aggregation helper", "aggregation helper", "aggregation".
    3 repo stars
57. ▌
    Route53 Record Manager · micsapp

    Manage route53 record manager operations. Auto-activating skill for AWS Skills. Triggers on: route53 record manager, route53 record manager Part of the AWS Skills skill category. Use when working with route53 record manager functionality. Trigger with phrases like "route53 record manager", "route53 manager", "route53".
    3 repo stars
58. ▌
    Bigquery Table Creator · micsapp

    Create bigquery table creator operations. Auto-activating skill for GCP Skills. Triggers on: bigquery table creator, bigquery table creator Part of the GCP Skills skill category. Use when working with bigquery table creator functionality. Trigger with phrases like "bigquery table creator", "bigquery creator", "bigquery".
    3 repo stars
59. ▌
    Cloud Monitoring Alert · micsapp

    Monitor cloud monitoring alert operations. Auto-activating skill for GCP Skills. Triggers on: cloud monitoring alert, cloud monitoring alert Part of the GCP Skills skill category. Use when monitoring systems or services. Trigger with phrases like "cloud monitoring alert", "cloud alert", "cloud".
    3 repo stars
60. ▌
    Analyzing Bootkit And Rootkit Samples · micsapp bundle

    Analyzes bootkit and advanced rootkit malware that infects the Master Boot Record (MBR), Volume Boot Record (VBR), or UEFI firmware to gain persistence below the operating system. Covers boot sector analysis, UEFI module inspection, and anti-rootkit detection techniques. Activates for requests involving bootkit analysis, MBR malware investigation, UEFI persistence analysis, or pre-OS malware detection.
    3 repo stars
61. ▌
    Analyzing Powershell Empire Artifacts · micsapp bundle

    Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
    3 repo stars
62. ▌
    Building Soc Metrics And Kpi Tracking · micsapp bundle

    Builds SOC performance metrics and KPI tracking dashboards measuring Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), alert quality ratios, analyst productivity, and detection coverage using SIEM data. Use when SOC leadership needs operational visibility, continuous improvement tracking, or executive-level reporting on security operations effectiveness.
    3 repo stars
63. ▌
    Building Threat Intelligence Platform · micsapp bundle

    Building a Threat Intelligence Platform (TIP) involves deploying and integrating multiple CTI tools into a unified system for collecting, analyzing, enriching, and disseminating threat intelligence. T
    3 repo stars
64. ▌
    Conducting Phishing Incident Response · micsapp bundle

    Responds to phishing incidents by analyzing reported emails, extracting indicators, assessing credential compromise, quarantining malicious messages across the organization, and remediating affected accounts. Covers email header analysis, URL/attachment sandboxing, and mailbox-wide purge operations. Activates for requests involving phishing response, email incident, credential phishing, spear phishing investigation, or phishing remediation.
    3 repo stars
65. ▌
    Configuring Oauth2 Authorization Flow · micsapp bundle

    Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token
    3 repo stars
66. ▌
    Correlating Security Events In Qradar · micsapp bundle

    Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks, and offense management to detect multi-stage attacks across network, endpoint, and application log sources. Use when SOC analysts need to investigate QRadar offenses, build correlation rules, or tune detection logic for reducing false positives.
    3 repo stars
67. ▌
    Detecting Lateral Movement In Network · micsapp bundle

    Identifies lateral movement techniques in enterprise networks by analyzing authentication logs, network flows, SMB traffic, and RDP sessions using Zeek, Velociraptor, and SIEM correlation rules to detect attackers moving between systems.
    3 repo stars
68. ▌
    Detecting Living Off The Land Attacks · micsapp bundle

    Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child relationships to identify suspicious LOLBin execution patterns.
    3 repo stars
69. ▌
    Detecting Mimikatz Execution Patterns · micsapp bundle

    Detect Mimikatz execution through command-line patterns, LSASS access signatures, binary indicators, and in-memory detection of known modules.
    3 repo stars
70. ▌
    Detecting Misconfigured Azure Storage · micsapp bundle

    Detecting misconfigured Azure Storage accounts including publicly accessible blob containers, missing encryption settings, overly permissive SAS tokens, disabled logging, and network access violations using Azure CLI, PowerShell, and Microsoft Defender for Storage.
    3 repo stars
71. ▌
    Detecting Network Anomalies With Zeek · micsapp bundle

    Deploys and configures Zeek (formerly Bro) network security monitor to passively analyze network traffic, generate structured logs, detect anomalous behavior, and create custom detection scripts for threat hunting and incident response.
    3 repo stars
72. ▌
    Detecting Port Scanning With Fail2ban · micsapp bundle

    Configures Fail2ban with custom filters and actions to detect port scanning activity, SSH brute force attempts, and network reconnaissance, automatically banning offending IP addresses and alerting security teams to suspicious network probing.
    3 repo stars
73. ▌
    Detecting Process Hollowing Technique · micsapp bundle

    Detect process hollowing (T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and parent-child process anomalies in EDR telemetry.
    3 repo stars
74. ▌
    Exploiting Nopac Cve 2021 42278 42287 · micsapp bundle

    Exploit the noPac vulnerability chain (CVE-2021-42278 sAMAccountName spoofing and CVE-2021-42287 KDC PAC confusion) to escalate from standard domain user to Domain Admin in Active Directory environments.
    3 repo stars
75. ▌
    Hardening Docker Daemon Configuration · micsapp bundle

    Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.
    3 repo stars
76. ▌
    Implementing Azure Defender For Cloud · micsapp bundle

    Implementing Microsoft Defender for Cloud to enable cloud security posture management, workload protection across VMs, containers, databases, and storage, configure security recommendations, and set up adaptive security controls with automated remediation.
    3 repo stars
77. ▌
    Implementing Cloud Trail Log Analysis · micsapp bundle

    Implementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity.
    3 repo stars
78. ▌
    Implementing Ebpf Security Monitoring · micsapp bundle

    Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement. Covers TracingPolicy CRD authoring with kprobe/tracepoint hooks, in-kernel filtering via matchArgs/matchBinaries selectors, JSON event export, and integration with SIEM pipelines. Use when building kernel-level runtime security observability for Linux hosts or Kubernetes clusters.
    3 repo stars
79. ▌
    Implementing GCP Binary Authorization · micsapp bundle

    Implement GCP Binary Authorization to enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.
    3 repo stars
80. ▌
    Implementing Ics Firewall With Tofino · micsapp bundle

    Deploy and configure Tofino industrial firewalls from Belden/Hirschmann to protect SCADA systems and PLCs using deep packet inspection for OT protocols including Modbus, EtherNet/IP, OPC, and S7comm, enforcing granular access control between ICS security zones.
    3 repo stars
81. ▌
    Implementing Iec 62443 Security Zones · micsapp bundle

    This skill covers designing and implementing security zones and conduits for industrial automation and control systems (IACS) per IEC 62443-3-2. It addresses zone partitioning based on risk assessment, assigning Security Level targets (SL-T), designing conduit security controls, implementing microsegmentation with industrial firewalls, and validating zone architecture through traffic analysis and penetration testing against the Purdue Reference Model.
    3 repo stars
82. ▌
    Investigating Phishing Email Incident · micsapp bundle

    Investigates phishing email incidents from initial user report through header analysis, URL/attachment detonation, impacted user identification, and containment actions using SOC tools like Splunk, Microsoft Defender, and sandbox analysis platforms. Use when a reported phishing email requires full incident investigation to determine scope and impact.
    3 repo stars
83. ▌
    Performing Container Escape Detection · micsapp bundle

    Detects container escape attempts by analyzing namespace configurations, privileged container checks, dangerous capability assignments, and host path mounts using the kubernetes Python client. Identifies CVE-2022-0492 style escapes via cgroup abuse. Use when auditing container security posture or investigating escape attempts.
    3 repo stars
84. ▌
    Performing File Carving With Foremost · micsapp bundle

    Recover files from disk images and unallocated space using Foremost's header-footer signature carving to extract evidence regardless of file system state.
    3 repo stars
85. ▌
    Performing GRAPHQL Depth Limit Attack · micsapp bundle

    Execute and test GraphQL depth limit attacks using deeply nested recursive queries to identify denial-of-service vulnerabilities in GraphQL APIs.
    3 repo stars
86. ▌
    Performing Hash Cracking With Hashcat · micsapp bundle

    Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w
    3 repo stars
87. ▌
    Performing Lateral Movement Detection · micsapp bundle

    Detects lateral movement techniques including Pass-the-Hash, PsExec, WMI execution, RDP pivoting, and SMB-based spreading using SIEM correlation of Windows event logs, network flow data, and endpoint telemetry mapped to MITRE ATT&CK Lateral Movement (TA0008) techniques.
    3 repo stars
88. ▌
    Performing Purple Team Atomic Testing · micsapp bundle

    Executes Atomic Red Team tests mapped to MITRE ATT&CK techniques, performs coverage gap analysis across the ATT&CK matrix, and runs detection validation loops to measure blue team visibility. Covers Invoke-AtomicRedTeam PowerShell execution, ATT&CK Navigator layer generation for heatmaps, Sigma rule correlation, and continuous atomic testing pipelines. Activates for requests involving purple team exercises, atomic test execution, ATT&CK coverage assessment, detection engineering validation, or adversary emulation testing.
    3 repo stars
89. ▌
    Performing Second Order SQL Injection · micsapp bundle

    Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.
    3 repo stars
90. ▌
    Performing Web Cache Deception Attack · micsapp bundle

    Execute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.
    3 repo stars
91. ▌
    Performing Web Cache Poisoning Attack · micsapp bundle

    Exploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.
    3 repo stars
92. ▌
    Testing API Authentication Weaknesses · micsapp bundle

    Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses. Maps to OWASP API2:2023 Broken Authentication. Activates for requests involving API authentication testing, token validation assessment, credential security testing, or API auth bypass.
    3 repo stars
93. ▌
    Context Optimization · micsapp bundle

    Use this skill BEFORE starting complex tasks. Check context levels proactively. Use when context usage approaches 50% of window, tasks need decomposition, complex multi-step operations planned, context pressure is high. Do not use when simple single-step tasks with low context usage. DO NOT use when: already using mcp-code-execution for tool chains.
    3 repo stars
94. ▌
    Response Compression · micsapp

    hype, and unnecessary framing. Includes termination and directness guidelines.
    3 repo stars
95. ▌
    Release Health Gates · micsapp bundle

    Standardizes release approvals with GitHub-aware checklists. Use when preparing releases, validating deployment gates, conducting release reviews, embedding release gate snippets in PRs. Do not use when weekly status updates - use github-initiative-pulse. DO NOT use when: code reviews - use pensive review skills.
    3 repo stars
96. ▌
    Python Packaging · micsapp bundle

    Consult this skill for Python package creation and distribution. Use when creating Python packages, configuring pyproject.toml, setting up entry points, publishing to PyPI, CI/CD for packages. Do not use when testing packages - use python-testing instead. DO NOT use when: optimizing package performance - use python-performance.
    3 repo stars
97. ▌
    Speckit Orchestrator · micsapp bundle

    Workflow orchestrator for Spec Driven Development. Coordinates skills and tracks progress. speckit workflow, spec driven development, speckit commands.
    3 repo stars
98. ▌
    Session Analyzer · micsapp bundle

    This skill should be used when the user asks to "analyze session", "세션 분석", "evaluate skill execution", "스킬 실행 검증", "check session logs", "로그 분석", provides a session ID with a skill path, or wants to verify that a skill executed correctly in a past session. Post-hoc analysis of Claude Code sessions to validate skill/agent/hook behavior against SKILL.md specifications.
    3 repo stars
99. ▌
    Notion Knowledge Capture · micsapp bundle

    Transforms conversations and discussions into structured documentation pages in Notion. Captures insights, decisions, and knowledge from chat context, formats appropriately, and saves to wikis or databases with proper organization and linking for easy discovery.
    3 repo stars
100. ▌
     Youtube Transcribe Skill · micsapp

     Extract subtitles/transcripts from a YouTube video URL and save as a local file. Use when you need to extract subtitles from a YouTube video.
     3 repo stars