Skip to content

Claude Skills by sodejm

github.com/sodejm

83 skillsA× 830 installs105 views

Test Sentinel HuntAStress-test an offline Sentinel hunt with curated, generated, mutation, metamorphic, scale-boundary, and hostile-content cases.securityperformanceVotes: 0GitHub stars: 2
Validate Sentinel HuntARun deterministic contract, schema, scope, compatibility, and safety validation for an offline Sentinel hunt artifact.securityrustVotes: 0GitHub stars: 2
Soc Investigation PlanningAPlan and resume a scoped SOC investigation across related signals, competing hypotheses, and evidence. Use when selecting or revising multi-step investigation work, ranking the next useful questions, or importing analyst observations. Delegate hunt design, KQL, telemetry correlation, and hunt qualification to the vendored Sentinel skills.securitypythontestingVotes: 0GitHub stars: 2
Soc Investigation ReviewAReview a SOC investigation case for unsupported conclusions, contradictory evidence, missing telemetry, scope drift, and useful next steps. Use at investigation checkpoints or when handing an evidence-backed summary to an analyst. This reviews case reasoning and does not qualify hunts or rewrite Sentinel query flows.securitypythonrustVotes: 0GitHub stars: 2
Threat Intelligence EnrichmentAEnrich analyst-selected indicators against explicitly approved, read-only MISP, TAXII, and Microsoft sources while preserving source claims and privacy.securityVotes: 0GitHub stars: 2
Ad Inventory And PathsAAnalyze approved local Active Directory inventory exports for provenance-linked candidate relationship paths and coverage gaps.securitypythonrustVotes: 0GitHub stars: 2
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Entra Identity AnalysisAModel and review Entra ID and AI Agent identity graphs, privilege boundaries, and exposure paths offline. Use when analyzing users, groups, service principals, managed identities, agent blueprints, or Entra Agent IDs for privilege escalation, consent risks, and entitlement boundaries.securityrustnodeVotes: 0GitHub stars: 2
Incident Response SandboxAPlan and rehearse typed incident actions against a synthetic local fixture only.securityrustVotes: 0GitHub stars: 2
Cve ReachabilityAInvestigate whether a specified CVE can be reached and triggered in a repository. Use for dependency-to-function tracing, parameter-level flow analysis, and evidence-backed reachability reports. Requires repository-specific inspection; does not provide an automatic call-graph engine.securitypythonVotes: 0GitHub stars: 2
Logging RecommendationsAAnalyze repository context and generate environment-specific, cost-conscious security logging recommendations.securitydebuggingdatabaseVotes: 0GitHub stars: 2
Repository ContextAScan and analyze repository structure to identify languages, frameworks, IaC, CI/CD pipelines, and credentials.securitypythongoVotes: 0GitHub stars: 2
Telemetry Proof TracingACorrelate supplied synthetic-marker evidence across source emission, Cribl Stream routing, SIEM indexing, and detection evaluation.securitypythonbashVotes: 0GitHub stars: 2
Authorized Attack Surface PlanningABuild a passive offline attack surface review plan from signed-off scope and pinned local exports.securitypythonrustVotes: 0GitHub stars: 2
Network Active DiscoveryAExecute bounded active port, protocol, and TLS assessment with explicit scan vantage, rate limits, resumable checkpoints, and visible fingerprint uncertainty.securitypythonbashVotes: 0GitHub stars: 2
Network Data ServicesAAssess databases (MySQL, Postgres, MSSQL, Oracle), NoSQL/document stores (MongoDB, CouchDB, Cassandra), caches (Redis, Memcached), and search/analytics engines (Elasticsearch, InfluxDB, Kibana, Splunk) with bounded query budgets, synthetic canary verification, cleanup receipts, and data privilege candidate routing.securitypythongoVotes: 0GitHub stars: 2
Network Developer InterfacesAAssess developer and runtime interfaces (Docker, Docker Registry, RMI, JDWP, Erlang EPMD, ADB, distcc, SVN, AJP, FastCGI) with execution effect classification, canary verification, cleanup receipts, and developer privilege candidate routing.securitypythonjavaVotes: 0GitHub stars: 2
Network Infrastructure ServicesAAssess DNS/mDNS, SNMP, NTP, discovery utilities, RPC, LDAP, and Kerberos service exposure with protocol-specific collectors, explicit authentication prerequisites, canary verification, and Active Directory attack-path handoff.securitypythonbashVotes: 0GitHub stars: 2
Network Legacy And Proxy ServicesAInterpret the nine legacy and proxy service fixture models and bounded socket observations without treating reachability or simulated conditions as verified protocol findings.securitypythonbashVotes: 0GitHub stars: 2
Network Messaging ServicesAAssess email services (SMTP, POP3, IMAP), chat (IRC), and message brokers/queues (AMQP/RabbitMQ, NATS, IBM MQ, Kafka, MQTT) with bounded message budgets, synthetic canary verification, cleanup receipts, and messaging privilege candidate routing.securitypythonbashVotes: 0GitHub stars: 2
Network Passive DiscoveryANormalize passive asset telemetry, preserve multi-source evidence provenance, and reconcile scope quarantine.securitypythonbashVotes: 0GitHub stars: 2
Network Remote And File ServicesAAssess remote administration (SSH, Telnet, RDP, VNC, WinRM, X11), file sharing (SMB, NFS, FTP/TFTP, rsync, AFP), and printing services (LPD, IPP, Raw/JetDirect) with canary verification, cleanup receipts, legacy version tracking, and host privilege candidate routing.securitypythonbashVotes: 0GitHub stars: 2
Ai Agent Mcp LaboratoriesARun synthetic local agent and MCP boundary cases and interpret observed fixture effects.securitypythonbashVotes: 0GitHub stars: 2
Ai Provider AssessmentAInspect offline provider-shaped response fixtures under exact plan and budget controls.securitypythonbashVotes: 0GitHub stars: 2
Foundry Agent ReviewAInspect synthetic adversarial scenarios and deterministic mock authorization outcomes.securitypythonbashVotes: 0GitHub stars: 2
Host Linux Privilege BoundariesAReview bounded local Linux privilege-boundary exports without host execution or live validation claims.securitytestingVotes: 0GitHub stars: 2
Kubernetes Assessment ContextAReconcile an explicitly approved Kubernetes context and namespace scope with a sanitized local observation.securitypythonkubernetesVotes: 0GitHub stars: 2
Engagement Intake And PlanningAIngest authorized engagement scope, validate targets and windows, and compile reviewable immutable action plans.securitypythonbashVotes: 0GitHub stars: 2
Engagement Specialist HandoffsAPass structured tasks and evidence between planner, specialist, skeptic, and auditor with capability checks and authorization invariance.securitypythonbashVotes: 0GitHub stars: 2
Model Effort RoutingASuggest an available model and supported reasoning effort before issue implementation or security work using fresh host capability and access evidence.securitypythonbashVotes: 0GitHub stars: 2
Scenario Laboratory ManagementAManage scenario laboratory environments with canary validation, isolation enforcement, reproducible reset, and verified case execution.securitypythonbashVotes: 0GitHub stars: 2
Workflow Capability DiagnosticsAInspect host platforms, tool prerequisites, package structures, and capability truth-in-advertising diagnostics.securitypythonbashVotes: 0GitHub stars: 2
Exposure TriageAPrioritize vulnerability alerts using multi-source evidence including SBOM versions, cloud asset criticality, network reachability, and compensating controls.securitypythonbashVotes: 0GitHub stars: 2
Patch ReviewAReview a pinned local Git patch for candidate security regressions with bounded offline analysis and analyst validation.securitygitsecurityVotes: 0GitHub stars: 2