PowerShell agent skills, page 4

Executes Atomic Red Team tests mapped to MITRE ATT&CK via Invoke-AtomicRedTeam PowerShell, generates ATT&CK Navigator coverage heatmaps, correlates results against Sigma rules, and runs detection…

mukul975/Anthropic-Cybersecurity-Skills

Automate native Windows apps and system interactions with PowerShell, documented COM APIs, and Microsoft UI Automation through the Windows host executor.

vellum-ai/vellum-assistant

统一的 IMA OpenAPI 技能，支持笔记管理和知识库操作. An agent skill from nexus-research-lab/nexus.

nexus-research-lab/nexus

Detect PowerShell Empire post-exploitation framework artifacts in Windows Script Block Logging (Event ID 4104) and Module Logging (Event ID 4103), including the default launcher string…

mukul975/Anthropic-Cybersecurity-Skills

Parse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encoded payloads, and living-off-the-land techniques.

mukul975/Anthropic-Cybersecurity-Skills

Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest…

mukul975/Anthropic-Cybersecurity-Skills

Run Hayabusa against collected Windows EVTX files to apply Sigma detection rules and produce a prioritized, chronological CSV/JSON timeline with severity levels, MITRE ATT&CK mappings, and…

mukul975/Anthropic-Cybersecurity-Skills

Run Chainsaw against collected Windows EVTX files to hunt with the SigmaHQ rule corpus, built-in detection rules, and high-speed keyword/regex search, plus analyze shimcache, SRUM, and event-log…

mukul975/Anthropic-Cybersecurity-Skills

Hunt for malicious PowerShell activity by analyzing Script Block Logging (Event 4104), Module Logging (Event 4103), and process creation events.

mukul975/Anthropic-Cybersecurity-Skills

Detects WMI-based lateral movement (e.g. An agent skill from mukul975/Anthropic-Cybersecurity-Skills.

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when starting a session, running shell commands, installing packages, or diagnosing platform-specific failures - detects OS, shell, runtime, package manager, and toolchain…

NoobyGains/godmode

Manage git worktrees using wtx CLI for parallel development workflows on Windows.

deadlock-mod-manager/deadlock-mod-manager

Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an alert yet.

briiirussell/cybersecurity-skills

Windows 11 system administration with PowerShell — system info reporting, hardware monitoring, package management (winget/scoop), disk cleanup, performance optimization, environment configuration…

EliasOulkadi/shokunin

JeecgBoot Online表单（cgform）全生命周期管理——通过API自动创建/编辑数据库表和表单配置， 支持单表、主子表、树表，26种控件类型，以及JS/Java/SQL增强、权限配置、数据CRUD、积木报表集成。

jeecgboot/skills

公众号热门账号推荐快速获取微信公众号综合实力排行榜TOP50，支持按日榜/周榜/月榜及垂直领域筛选，展示综合评分以及详细数据。支持深度分析单个账号、导出HTML可视化报告、订阅日/周/月榜推送。当用户需要查询公众号实力排行、按时间或领域筛选、查看互动指标、获取榜单解读、导出图表或接收定期推送时使用。

redfox-data/redfox-community

迭代执行流水线启动器。分三个阶段执行：信息检查（验证 git 环境、获取迭代信息、 解析迭代分支）→ 恢复检测（已有状态文件时判定恢复策略）→ 新流程初始化（创建分支、 迭代目录和 iteration-state.json）。

TencentBlueKing/bk-bcs

Apply ok-end-field repository rules for tests, commits, PRs, secrets, PowerShell text handling, and broad source edits.

AliceJump/ok-end-field

Blue-team CLI threat hunt over Windows Event Logs. An agent skill from ptn1411/skill.

ptn1411/skill

Windows Defender: scans, threat history, signatures (PowerShell)

taracodlabs/aiden

Windows net diag: ping, traceroute, DNS, port scan (PowerShell)

taracodlabs/aiden

Outlook calendar + inbox via PowerShell COM or Microsoft Graph

taracodlabs/aiden

Expert PowerShell: processes, services, WMI, REST, scheduled tasks

taracodlabs/aiden

Read, write, query Windows Registry via PowerShell provider. An agent skill from taracodlabs/aiden.

taracodlabs/aiden

Windows services: list, start, stop, restart, configure (PowerShell)

taracodlabs/aiden

Organize, back up, compress, split, and merge files/folders using rule-driven plans; use when you need safe previews, conflict handling, and verification before executing file operations.

aipoch/medical-research-skills

Get a live job market snapshot for any role and tech stack by deploying parallel TinyFish agents across LinkedIn, Indeed, and Glassdoor.

tinyfish-io/tinyfish-cookbook

Find paid open-source work, OSS bounties, open source grants, or ways to get paid contributing to open source.

tinyfish-io/tinyfish-cookbook

Researches any project idea against live data from GitHub and Dev.to to surface what already exists, how mature the space is, and where the real opportunity lives.

tinyfish-io/tinyfish-cookbook

Start / stop / status of the Typhon Workbench dev servers (Kestrel :5200 + Vite :5173) with file-based PID tracking so state survives across Claude Code sessions

Log2n-io/Typhon

AV/EDR evasion playbook for Windows. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

Create or update a GitHub pull request with an auto-generated title and description from branch commits.

macalbert/envilder

Safe test execution patterns for opencode-swarm. An agent skill from ZaxbyHub/opencode-swarm.

ZaxbyHub/opencode-swarm

Glue daily-build self-update and its Windows replacement helper.

vchelaru/FlatRedBall

Investigate a compromised or suspicious Windows host from on-disk artifacts -- triage collection, evidence of execution (Prefetch, Amcache, Shimcache, SRUM, UserAssist, BAM), the event-log…

trilwu/secskills

Iterate on Snagit COM automation with official samples, a fake adapter, bounded live probes, and disposable local output.

jeremylongshore/tons-of-skills-marketplace

Implement Snagit image capture behind a narrow typed adapter with official enums, ordered configuration, bounded async completion, and path-safe results.

jeremylongshore/tons-of-skills-marketplace

Microsoft 365 tenant administration for Global Administrators.

borghei/Claude-Skills

Builds the project using the running Defold editor, returns build errors, and launches the game if build succeeds.

selimanac/defold-astar

Create, deploy, update, and manage custom detection rules in Microsoft Defender XDR via the Graph API (/beta/security/rules/detectionRules).

SCStelz/security-investigator

MITRE ATT&CK Coverage Report — YAML-driven PowerShell pipeline gathers analytic rule MITRE tags, custom detection techniques, SOC Optimization recommendations, and alert/incident operational data…

SCStelz/security-investigator

Sentinel Ingestion Report — YAML-driven PowerShell pipeline gathers all data via az monitor/az rest/Graph API, writes a deterministic scratchpad, LLM renders the report.

SCStelz/security-investigator

Choose between PowerShell and Git Bash using the bundled note.

Jinze-Lee/codex-skills-workbench

Develop PowerShell scripts, tools, modules, and GUIs following Microsoft best practices.

aiskillstore/marketplace

Execute shell commands for system operations, directory creation, and script execution.

openakita/openakita

The FieldWorks code-comment standard for C, C/C++, IDL, PowerShell, and project-file/Avalonia-view XML comments.

sillsdev/FieldWorks

Build, deploy, and validate the Windows iccIisIsapi HTTP endpoints, browser console, upload pipeline, PAWG report, artifacts, and security behavior.

InternationalColorConsortium/iccDEV

帮用户领取中国国航（Air China / 国航 / 国际航空）的优惠券。当用户说"我想领国航的券"、"帮我领张国航机票券"、"国航有活动券吗"、"给我发国航优惠券"、"airchina 券"、"国航活动"、"帮我领张国航券"、"国航现在有活动吗"、"我想领张机票优惠券"、"国航的券怎么领"、"给我发国航券"、"airchina…

infometa/workbuddyskills