All authors
Claude Skills by WYRE-AI
github.com/WYRE-AI135 skills0 installs175 views
- Skill Template[What this skill covers — the domain knowledge inside: entities, API surface, workflows, gotchas. One clear statement of coverage; do not restate the trigger conditions from when_to_use.]Votes: 0GitHub stars: 46
- Api PatternsAbnormal Security REST API fundamentals: Bearer token authentication, base URLs, rate limiting, pagination, OData filtering, request/response formats, and error handling.Votes: 0GitHub stars: 46
- CasesAbnormal Security abuse mailbox cases: user-reported email submissions, case statuses and judgments, the case lifecycle, bulk and remediation actions, and phishing simulation handling.Votes: 0GitHub stars: 46
- MessagesAbnormal Security message analysis: message retrieval, email header inspection, attachments, sender reputation, delivery context, and SPF/DKIM/DMARC authentication results.Votes: 0GitHub stars: 46
- ThreatsAbnormal Security threat detection: threat types (BEC, phishing, malware, socially-engineered attacks, spam, graymail, credential theft), attack vectors, severity assessment, remediation actions, and investigation workflows.Votes: 0GitHub stars: 46
- AgentsAtera RMM agents: agent records and fields, online/offline status, endpoint search and monitoring, PowerShell and script execution, and agent lifecycle.Votes: 0GitHub stars: 46
- AlertsAtera alerts: alert types, severity levels, alert sources, the acknowledge/resolve lifecycle, and alert-to-ticket conversion.Votes: 0GitHub stars: 46
- CustomersAtera customers and contacts: customer records and fields, contact management, custom fields, and customer lifecycle operations.Votes: 0GitHub stars: 46
- DevicesAtera device monitors: HTTP, SNMP, and TCP monitor types for network devices, services, and applications, plus monitor configuration, thresholds, and polling behavior.Votes: 0GitHub stars: 46
- TicketsAtera service desk tickets: ticket fields, statuses, priorities, comments, work hours, and billing duration.Votes: 0GitHub stars: 46
- NetworksAuvik network and interface entities: the network entity model, IP-range scoping, interface-to-device relationships, and adminStatus vs operStatus.Votes: 0GitHub stars: 46
- ConnectionOnboarding the azure-mcp connector in the WYRE MCP Gateway: Azure service-principal registration, the tenantId/clientId/clientSecret triple, least-privilege Reader-tier RBAC assignments, the gateway's read-only namespace allowlist, and connection verification and failure modes (expired secret, missing role assignment).Votes: 0GitHub stars: 46
- Cost And CapacityThe read-only cost and capacity half of the azure-mcp connector — the pricing, quota, subscription, and group namespaces: retail meter-rate lookups, quota and usage headroom, subscription and resource-group inventory, and the retail-versus- actual-billing distinction that shapes every estimate.Votes: 0GitHub stars: 46
- ObservabilityThe read-only observability half of the azure-mcp connector — the monitor, resourcehealth, applens, and advisor namespaces: Azure Monitor metrics, Log Analytics KQL, alert-rule state, platform health states, AppLens detectors, and Advisor recommendation categories, plus the degraded-resource investigation order.Votes: 0GitHub stars: 46
- IncidentsBetter Stack incidents: incident records raised by uptime monitors or reported manually, and the triage, acknowledgment, and resolution lifecycle.Votes: 0GitHub stars: 46
- LoggingBetter Stack log management (Logtail): log sources, structured log search and query syntax, log-based alerting, and log analysis workflows.Votes: 0GitHub stars: 46
- MonitorsBetter Stack uptime monitors: check types, monitor fields, heartbeat monitors, monitor groups, and create/update/pause/delete operations.Votes: 0GitHub stars: 46
- OncallBetter Stack on-call: on-call calendars and rotations, escalation and notification policies, alert routing, and determining who is currently on call.Votes: 0GitHub stars: 46
- Status PagesBetter Stack status pages: status page configuration, resources and components, maintenance windows, and public service-status communication.Votes: 0GitHub stars: 46
- Asset InventoryBlackpoint Cyber (CompassOne) asset data: the six asset classes, listing and paginating assets per class, cross-class search, asset detail, and walking parent/child/sibling relationships to build a blast-radius or topology view.Votes: 0GitHub stars: 46
- Incident ResponseBlackpoint Cyber (CompassOne) detection investigation: the read-only tool surface across tenants, assets, detections, and vulnerabilities, the tenant → asset → detection → vulnerability drill-down, asset relationship maps, dark-web and external-exposure cross-references, and which tool domains are stubs.Votes: 0GitHub stars: 46
- Multi Tenant OperationsPartner-level Blackpoint Cyber (CompassOne) operations: the partner-tenant hierarchy, enumerating customer tenants, sweeping detections and vulnerabilities across all of them, spotting volume anomalies, and building per-tenant scorecards.Votes: 0GitHub stars: 46
- Vulnerability ManagementBlackpoint Cyber (CompassOne) exposure data across four lenses: host vulnerability findings and the filters that matter (CVE, severity, patch and exploit availability), scan history, dark-web credential and data leaks, and internet-facing external exposures — plus how to combine them into a prioritized remediation view.Votes: 0GitHub stars: 46
- FindingsThe Blumira finding lifecycle: status and severity codes, resolution types, list filtering, enriched detail retrieval, assignment, and comment threads.Votes: 0GitHub stars: 46
- MspBlumira's MSP path group (`/msp/*`): managed-account enumeration, cross-account and per-account finding queries, per-account device, agent-key and user management, and how MSP paths differ from org paths.Votes: 0GitHub stars: 46
- ResolutionsBlumira resolution types (Valid, Not Applicable, False Positive): how to choose between them, their effect on security metrics and detection tuning, and the org- and MSP-level resolve calls.Votes: 0GitHub stars: 46
- UsersBlumira organization users: listing and filtering users, user roles, and looking up the user IDs required for finding assignment and access audits.Votes: 0GitHub stars: 46
- GroupsTenant-scoped Entra/M365 group enumeration and creation in CIPP, the four group types (Security, Microsoft 365, Distribution, Mail-Enabled Security) and when to pick each, and the boundary where CIPP's group surface ends and Graph/M365 takes over.Votes: 0GitHub stars: 46
- LicensesRead-only M365 license visibility through CIPP: per-tenant SKU purchase vs. consumption, portfolio-wide CSP license commitments, common SKU part numbers and their friendly names, and the license-mix red flags that drive rightsizing and billing reconciliation.Votes: 0GitHub stars: 46
- MailboxesThe four Exchange Online mailbox operations CIPP exposes — mailbox inventory, delegate/full-access permission audit, out-of-office, and email forwarding — plus the BEC-remediation, offboarding, and leave-coverage sequences built from them.Votes: 0GitHub stars: 46
- OpsCIPP's own operational layer rather than the tenants it manages: GDAP role definitions and pending invites, the CIPP scheduler, and the ping/version/log endpoints used to diagnose why other CIPP tools fail silently.Votes: 0GitHub stars: 46
- SecurityRead-only access to a tenant's Conditional Access policy graph and named locations through CIPP: policy state semantics, the findings that matter in a CA review, portfolio drift detection, and why CA writes are absent from the MCP surface.Votes: 0GitHub stars: 46
- StandardsCIPP's tenant-baseline enforcement model: the Report/Alert/Remediate standards modes and how to roll them out, on-demand standards evaluation, Best Practice Analyser reports, and SPF/DKIM/DMARC domain health results with their remediation actions.Votes: 0GitHub stars: 46
- TenantsThe top-level CIPP scope: enumerating managed M365 tenants, retrieving tenant detail, and the accepted `tenantFilter` identifier formats (default domain, custom domain, GUID, `allTenants`). Also covers stale-cache detection and the two common tenant-resolution failure modes.Votes: 0GitHub stars: 46
- ClientsConnectWise Automate client management: client CRUD, client identifiers, locations, client hierarchy, groups, extra data fields (EDFs), and client-level settings.Votes: 0GitHub stars: 46
- ComputersConnectWise Automate computer/endpoint management: computer identifiers (ComputerID, Name, ComputerGUID, MAC), status values, OS types, hardware/software inventory, disk, patch, and antivirus status, plus remote management operations.Votes: 0GitHub stars: 46
- ScriptsConnectWise Automate script management: script types (PowerShell, batch, VBScript, Shell), script folders, script execution on computers, parameter handling and validation, execution status polling, and result/history retrieval.Votes: 0GitHub stars: 46
- CompaniesConnectWise PSA company/account management: company types, statuses, sites/locations, custom fields, and company relationships. Essential for MSP account management and CRM operations in ConnectWise PSA.Votes: 0GitHub stars: 46
- ContactsConnectWise PSA contact management: contact records, contact types, communication items (email, phone), portal access, and relationships to companies. Essential for MSP customer relationship management in ConnectWise PSA.Votes: 0GitHub stars: 46
- Product CatalogConnectWise PSA product catalog: catalog items (SKUs), categories, subcategories, manufacturers, and their use on quotes, opportunities, agreements, and tickets. Covers the full catalog item field reference, common MSP workflows (hardware SKU, software license, managed service, agreement add-on), and the passthrough pattern for fields not surfaced on the MCP tool directly.Votes: 0GitHub stars: 46
- ProjectsConnectWise PSA project management: project lifecycle and status/type values, phases, templates, resource/team allocation, budgeting, billing methods, and project tickets.Votes: 0GitHub stars: 46
- Time EntriesConnectWise PSA time entry management: charge-to types (tickets, projects, charge codes), billable vs non-billable time, work types and work roles, time sheets, and the time entry approval workflow.Votes: 0GitHub stars: 46
- SurveysCrewhu CSAT/NPS survey data: the list/search/get tools and the detractor/promoter sentiment slices, the trend, detractor-follow-up, promoter-recognition and per-tech roll-up workflows, and the edge cases that skew scores — sparse response counts, comment-only feedback, and tenant-local timestamps.Votes: 0GitHub stars: 46
- NetworkDomotz network observation: the collector's topology graph, its own interfaces, detected IP conflicts, and the two SNMP surfaces — polled variables and custom sensors — with their history endpoints and the tools and error modes for each.Votes: 0GitHub stars: 46
- QuarantineFinding and acting on mail in Checkpoint Harmony Email (Avanan): the `hec_search_emails` attribute-filter syntax, what an entity payload carries, the asynchronous quarantine and restore actions and their task polling, and the judgement a restore requires because delivery cannot be undone.Votes: 0GitHub stars: 46
- PhishingKnowBe4 phishing simulations: campaign creation and lifecycle, security test management, recipient interaction tracking (sent, opened, clicked, reported), phish-prone percentage calculation, template selection, landing pages, and click tracking.Votes: 0GitHub stars: 46
- ReportingKnowBe4 security awareness reporting: phishing summary statistics, training completion rates, risk score overviews, trend analysis, organizational benchmarks, and executive dashboards, including how to interpret metrics and communicate posture to stakeholders.Votes: 0GitHub stars: 46
- TrainingKnowBe4 training campaign management: campaign lifecycle, enrollment workflows, completion tracking, training module and content library browsing, store purchases, and compliance deadline monitoring.Votes: 0GitHub stars: 46
- ForensicsProofpoint Forensics and Threat Response (TRAP) fundamentals: auto-pull and search-and-destroy remediation actions, evidence collection, message trace, and post-delivery incident response workflows for email-borne threats.Votes: 0GitHub stars: 46
- PeopleProofpoint People-Centric Security fundamentals: Very Attacked People (VAP) reports, attack index scoring, click susceptibility, top clickers, and user risk categorization for targeting security controls and training.Votes: 0GitHub stars: 46