All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 20,291
- 846
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 9,721–9,744 of 20,291 skills
- Deception HoneypotDefensive deception and honeypot deployment covering SSH/Telnet (Cowrie), web (OpenCanary), enterprise (HFish), ICS/SCADA (Conpot), all-in-one (T-Pot), AI-driven deception (Beelzebub), Thinkst Canarytokens (DNS, HTTP, file, AWS API key, SQL), Dionaea multi-protocol honeypot, notification pipelines (Slack/Teams webhooks), false positive tuning, and attacker engagement — including lure design, deployment OPSEC, IOC extraction, and attacker attribution.Votes: 0GitHub stars: 70
- Cspm Casb AttackCSPM/CASB/CNAPP platform bypass and abuse — rule suppression exploitation, IaC state manipulation, CASB proxy evasion, SaaS shadow discovery, Wiz/Prisma/Lacework/Defender coverage gap identification, and tag-tampering attacks against cloud posture management tools.Votes: 0GitHub stars: 70
- Container SecurityContainer security covers the complete lifecycle from image building, registry management, runtime protection, to orchestration platform (Kubernetes) security.Votes: 0GitHub stars: 70
- Cloud Native Vuln ResearchCVE research methodology, PoC reproduction, patch gap analysis, and exploit chain composition across container/k8s/cloud-native surfaces; SBOM-driven vuln management and nuclei template authoring.Votes: 0GitHub stars: 70
- Ci Cd Supply Chain AttackCI/CD pipeline and software supply chain compromise covering Jenkins (script console, Jenkinsfile injection, shared library abuse, CVE-2024-23897 args4j), GitLab CI/CD (runner abuse, .gitlab-ci.yml injection, self-hosted runner takeover, CVE-2022-1162, OmniAuth CVE-2024-9653), GitHub Actions (self-hosted runner abuse, pull_request_target trap, workflow injection via issue/PR title, secrets exfiltration via cache/artifact, GITHUB_TOKEN scope), CircleCI (context theft, OIDC abuse), Argo CD (CVE...Votes: 0GitHub stars: 70
- Av Edr EvasionAV/EDR evasion covers techniques for bypassing antivirus (AV) and Endpoint Detection/Response (EDR) solutions during payload delivery, execution, and post-exploitation.Votes: 0GitHub stars: 70
- Ai Agent Supply Chain AttackAI/ML supply chain attacks — model poisoning, Pickle RCE, Hugging Face / Ollama registry compromise, LangChain plugin backdoors, OpenClaw / ClawHub ecosystem threats. Distinguishes from ci-cd-supply-chain-attack by focusing on model weights, training data, and serialization formats. Anchored by the 2026-07 Hugging Face incident (the 'Chernobyl moment' of software supply chain security).Votes: 0GitHub stars: 70
- 5g Telecom Attack5G core (AMF/SMF/UPF), RAN, signaling (PFCP/GTP/Diameter/SS7), IMSI catchers, O-RAN security, roaming abuse, SMS interception, and telecom infrastructure red team operations.Votes: 0GitHub stars: 70
- HawkBuild, refactor, and debug Hawk pages, templates, cards, and Hawk-500 code. Use when working with Hawk's page/file/card/load model, Sail/manx UI, `%twin`/`%call`/`%view`/`%lens` composition, Feather styling, Spine components, or Hawk metadata such as `/peek/public` and `/poke/public`.Votes: 0GitHub stars: 37
- SparvMinimal SPARV workflow (Specify→Plan→Act→Review→Vault) with 10-point spec gate, unified journal, 2-action saves, 3-failure protocol, and EHRB risk detection.Votes: 0GitHub stars: 2,747
- Ansible ValidateValidate Ansible playbook syntax and run ansible-lintVotes: 0GitHub stars: 2
- upstash-ratelimit-tsLightweight guidance for using the Redis Rate Limit TypeScript SDK, including setup steps, basic usage, and pointers to advanced algorithm, features, pricing, and traffic‑protection docs.Votes: 0GitHub stars: 2,044
- Splunk Windows Ta Setup"Use when the user asks about Splunk_TA_windows, the Splunk Add-on for Microsoft Windows, WinEventLog orVotes: 0GitHub stars: 39
- Splunk Vmware Ta Setup"Use when the user asks about VMware, vCenter, ESXi logs, VMware metrics, VMware indexes, VMwareVotes: 0GitHub stars: 39
- Splunk Uba Setup"Use when validating Splunk UBA / UEBA readiness, optional UBA Kafka ingestion app placement, andVotes: 0GitHub stars: 39
- Splunk Syslog Web Proxy Ta Setup"Use when the user asks to onboard, configure, render, or validate these web, proxy, DNS/DHCP, ADC, orVotes: 0GitHub stars: 39
- Splunk Supported Addons Setup"Use when the user asks for Splunk-supported add-on coverage, supported-addons gap analysis, Unix orVotes: 0GitHub stars: 39
- Splunk Platform Sizing"Use when the user asks to size a Splunk cluster, decide how many indexers or search heads they need,Votes: 0GitHub stars: 39
- Splunk Observability Otel Collector Setup"Use when rendering, preflighting, applying, validating, diagnosing, and removing the Splunk DistributionVotes: 0GitHub stars: 39
- Splunk Observability Nvidia Gpu Integration"Use when the user asks to send NVIDIA GPU, DCGM, DCGM Exporter, GPU Operator, DGX, AI Pod, or CUDAVotes: 0GitHub stars: 39
- Splunk Observability K8s Auto Instrumentation Setup"Use when wiring zero-code Java, Node.js, Python, .NET, Go, Apache, or Nginx instrumentation into SplunkVotes: 0GitHub stars: 39
- Splunk Observability Isovalent Integration"Use when wiring Cilium, Tetragon, or Hubble metrics into Splunk Observability Cloud, shipping TetragonVotes: 0GitHub stars: 39
- Splunk Observability Gcp Integration"Use when the user asks to connect Splunk Observability Cloud to GCP metrics, configure Service AccountVotes: 0GitHub stars: 39
- Splunk Observability Deep Native Workflows"Use when the user asks for full native UI/product workflow coverage beyond collection, classicVotes: 0GitHub stars: 39