В каталоге 183 730 навыков в 14 категориях.
Detect which Language Server Protocol (LSP) servers are available for the current project and configure codemunch to use...
Analyze a metric for statistical anomalies using z-score analysis and threshold checking. Detects spikes, drops, and tre...
Detect N+1 query patterns in the codebase. Finds loops that contain database or API calls that should be batched. Works...
Detects whether a codebase implements the NodeInfo protocol endpoint. NodeInfo is a standard used by Fediverse and feder...
Determine if a string value should be translated or left as-is. Use when filtering localization keys, validating transla...
Run pre-trained AI models on geospatial imagery. Detect buildings, cars, ships, solar panels, agriculture fields, or use...
以鈀金的先行轉向作為確認條件，檢驗白銀短期漲跌是否獲得工業景氣與風險情緒的同步支持，並標記缺乏鈀金參與度的失敗走勢。
Detect project type and configuration for generic application releases
Detects the Python major and minor version of the current repository
Detect recurring patterns in issues and events. Identifies temporal, resource-based, cluster, and cascading patterns. Su...
Analyze git changes to determine release scope (marketplace/plugin/variants)
以公開交易所庫存資料為核心，量化上海白銀庫存耗盡的方向、速度與加速度，並將其轉成可交易的供給緊縮訊號。
ACTIVATION PREREQUISITE: the request or discovered target must explicitly identify C#, .NET, `.cs`, or `.csproj`; otherw...
Scan C# source files for hard-to-test static dependencies — DateTime.Now/UtcNow, File.*, Directory.*, Environment.*, Htt...
投前 AI 图真实性质检。待检图 → 风险等级 + 8 项逐条判定 + 可直接追加到 prompt 的修正句，可自动重跑直到达标。当用户说「投前检测」「图片质检」「检查有没有崩」「上架前把关」「这图能不能用」时使用。
Detect trending topics across multiple articles by analyzing entity co-occurrence and cross-source mentions. Uses memory...
把多個股票估值指標統一轉成在過去百年歷史中的分位數，再合成一個總分，判斷目前是否處於歷史極端高估區間，並用歷史類比（如 1929、1965、1999）給出風險解讀。
Detects whether the terminal, console, or device supports UTF-8 encoding. Checks code page, .NET encoding defaults, envi...
Detects whether a codebase implements the WebFinger protocol endpoint (RFC 7033). Use this skill whenever the user asks...
Utilities and patterns for detecting execution environment (CI/CD vs local, network access, available ports, timeouts)....
Detects prompt injection attacks targeting LLM-based applications using a multi-layered defense combining regex pattern...
蓝队与紫队工程：检测规则编写、SIEM/EDR 调优、事件响应、数字取证、威胁狩猎、ATT&CK 映射、紫队演练闭环。Use when writing Sigma/YARA detection rules, tuning SIEM nois...
This skill covers deploying anomaly detection systems for industrial control environments using machine learning models...
Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier acce...
Detects arbitrary read vulnerabilities by identifying unchecked array indexing and out-of-bounds memory access. Use when...
Detects arbitrary write vulnerabilities by identifying unchecked array indexing and out-of-bounds memory writes. Use whe...
Detect and prevent ARP spoofing attacks using ARPWatch, Dynamic ARP Inspection, Wireshark analysis, and custom monitorin...
Detect cyber attacks targeting OT historian servers (OSIsoft PI, Ignition, Wonderware) that sit at the IT/OT boundary an...
This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including m...
Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to...
Automate AWS GuardDuty threat detection findings processing using EventBridge and Lambda to enable real-time incident re...
Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive p...
Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunti...
Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consen...
Audit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption...
Performs statistical analysis of Zeek conn.log connection intervals to detect C2 beaconing patterns. Uses the ZAT librar...
Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration ab...
Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data...
Detects stack and heap buffer overflow vulnerabilities in binary code by identifying unsafe memory operations. Use when...
Business Email Compromise (BEC) is a sophisticated fraud scheme where attackers impersonate executives, vendors, or trus...
Deploy AI and NLP-powered detection systems to identify business email compromise attacks by analyzing writing style, be...
This skill teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous threat detection acro...
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dns...
Detects OS command injection vulnerabilities by identifying unsafe system/popen/exec calls with user-controlled input. U...
Detecting compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible trave...
Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, a...
Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host...
Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, Windows Security...
Process identify anomalies and outliers in datasets using machine learning algorithms. Use when analyzing data for unusu...
Investigate outliers, rare events, spikes, and suspicious records in datasets. Use as an explicit anomaly-analysis helpe...
Identify anomalies and outliers in datasets using machine learning algorithms.Use when analyzing data for unusual patter...
Use when you need to work with deadlock detection.This skill provides deadlock detection and resolution with comprehensi...
Detect DCSync attacks where adversaries abuse Active Directory replication privileges to extract password hashes by moni...
Identifies unreachable functions, unused variables, and abandoned code in binary programs. Use when optimizing binary si...
Detects AI-generated deepfake audio used in voice phishing (vishing) attacks by extracting spectral features (MFCC, spec...
Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumera...
Detect DLL side-loading attacks where adversaries place malicious DLLs alongside legitimate applications to hijack execu...
Detect anomalies in DNP3 (Distributed Network Protocol 3) communications used in SCADA systems by monitoring for unautho...
Detect anomalies in DNP3 communications used in SCADA/ICS systems by monitoring unauthorized control commands, firmware...
Detect data exfiltration through DNS tunneling by analyzing query entropy, subdomain length, query volume, TXT record ab...
Detects double free vulnerabilities by identifying attempts to free the same memory block twice. Use when analyzing memo...
Show what changed since last validation for a specific artifact. Computes confidence without writing to frontmatter.
Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locatio...
Detect malicious email forwarding rules created by adversaries to maintain persistent access to email communications for...
Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process i...
Detect DNS-based data exfiltration by analyzing Zeek dns.log for high-entropy subdomains and anomalous query patterns
Detects existing PR review threads to prevent duplicate comments. Use BEFORE posting any inline comments. Fetches resolv...
Detects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent files to disk, ev...
Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection, registry-...
Detects format string vulnerabilities by identifying unsafe printf family function calls with user-controlled format str...
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal...
Detect Kerberos Golden Ticket forgery (e.g. Mimikatz-forged tickets) by analyzing Windows Event ID 4769 for RC4 encrypti...
Detects incorrect use of free() including freeing non-heap memory, invalid pointers, and mismatched allocators. Use when...
Detects incorrect use of memset() including wrong argument order, incorrect size calculations, and misunderstood behavio...
Detects information disclosure vulnerabilities including sensitive data in logs, error message exposure, and memory leak...
Use when detecting infrastructure drift from desired state. Trigger with phrases like "check for drift", "infrastructure...
Detects insider data exfiltration by analyzing DLP policy violations, file access patterns, upload volume anomalies, and...
Detect insider threat behavioral indicators including unusual data access, off-hours activity, mass file downloads, priv...
Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch to build behavioral baselines, calculate ano...
Detects integer overflow and underflow vulnerabilities in arithmetic operations used for buffer sizing or allocation. Us...
Detect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests targeting service accounts with SPNs for...
Detect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests (Event ID 4769) targeting service account...
Identifies lateral movement techniques in enterprise networks by analyzing authentication logs, network flows, SMB traff...
Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs, SMB traf...
Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb...
Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, c...
Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including certutil, regsvr32, mshta, and rundll32 via process...
Detects logic bypass vulnerabilities including authentication bypass, authorization bypass, and business logic flaws. Us...
Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardD...
Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11...
Detects various memory corruption vulnerabilities beyond simple buffer overflows including heap overflow, stack smashing...
Detect Mimikatz execution through command-line patterns, LSASS access signatures, binary indicators, and in-memory detec...