Anomaly detection

Forecasts any univariate time series zero-shot with Google's TimesFM model, returning point forecasts and calibrated prediction intervals without training.

google-research/timesfm

AI-powered financial analysis suite. An agent skill from ericosiu/ai-marketing-skills.

ericosiu/ai-marketing-skills

Adds a new anomaly-detection model to anomalib under src/anomalib/models/.

open-edge-platform/anomalib

Hunts for compromised workloads and malicious traffic in a Kubernetes cluster by sweeping network data through Kubeshark MCP, mapped to MITRE ATT&CK.

kubeshark/kubeshark

Runs and configures the anomalib tiled-ensemble pipeline, which trains/evaluates one model per image tile and merges results (with optional seam smoothing) for high-resolution anomaly detection.

open-edge-platform/anomalib

KQL language expertise for writing correct, efficient Kusto queries using the Fabric RTI MCP tools.

microsoft/fabric-rti-mcp

Build a new time-series analytics use case on top of the deployed Time Series Analytics microservice — bring it up with Docker Compose (from a repo clone, or by fetching the compose files from…

open-edge-platform/edge-ai-libraries

Analyze dashboards and notebooks using Davis analyzers — anomaly detection, novelty scoring, and correlation.

Dynatrace/dynatrace-for-ai

Guides time series machine learning with the aeon toolkit: classification, regression, clustering, forecasting, anomaly detection, segmentation and similarity search.

davila7/claude-code-templates

Automate repeated Kagi queries with batch search, watches, notifications, history, caching, and MCP.

Microck/kagi-cli

Create and manage Elastic ML anomaly detection jobs via the API.

elastic/agent-skills

A skill your agent uses when migrating a Frappe app between major versions, detecting breaking API changes, or resolving post-migration errors.

Impertio-Studio/Frappe_Claude_Skill_Package

Analyzes insurance operating data such as premium, loss ratio, renewal rate and expense ratio by branch, product and channel, flags anomalies and builds an HTML dashboard.

zj-unicom-ai/UniEmployee

Explain Elasticsearch ML anomaly detection scores, model behavior, and result interpretation.

elastic/agent-skills

基于阈值检测时间序列中的显著异常波动点。当需要找出指标异常波动日期、识别数据异动时调用. An agent skill from agentscope-ai/QwenPaw-Data.

agentscope-ai/QwenPaw-Data

Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java.

microsoft/skills

Codified expertise for returns authorisation, receipt and inspection, disposition decisions, refund processing, fraud detection, and warranty claims management.

sickn33/agentic-awesome-skills

A skill your agent uses when building or refactoring Angular applications — choosing between signals, RxJS, and NgRx for state, configuring routing with guards and lazy loading, optimizing change…

kid-sid/claude-spellbook

A skill your agent uses when the user asks for a WorkOS docs URL, term, or dashboard field (Sign-in endpoint, initiateloginuri, Redirect URI, WORKOS env vars), or is implementing, debugging, or…

usenotra/notra

Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis…

awarexone/Agentic-Bug-Hunter

Uncommitted code risk assessment with breaking change detection, blast radius analysis, and scope metrics.

sd0xdev/sd0x-harness

Design and analyze studies in sociolinguistics, language variation, acoustic phonetics, discourse analysis, language contact, and computational linguistics.

joshzyj/open-scholar-skill

Monitor AI agent health, detect anomalies, set up alerting, and maintain observability dashboards for production multi-agent systems.

cosmicstack-labs/mercury-agent-skills

Safe Terraform provider upgrades with automatic resource migration, breaking change detection, and state management using moved blocks.

thomast1906/github-copilot-agent-skills

A skill your agent uses when building, refactoring, or debugging Angular (v20/21+): standalone components, signals, zoneless change detection, @if/@for/@defer control flow, inject() DI…

ericrisco/rsc-harness

Catches unusual performance changes across your accounts — CPC spikes, CVR drops, spend surges, impression collapses, CTR shifts — and flags them with context about what likely changed.

irinabuht12-oss/marketing-skills

Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, and configuration changes for security violations.

mukul975/Anthropic-Cybersecurity-Skills

Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate limit bypass, credential scanning, and injection attempts.

mukul975/Anthropic-Cybersecurity-Skills

Detect abnormal access in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics for after-hours bulk downloads, new-IP access, and…

mukul975/Anthropic-Cybersecurity-Skills

Deploys and configures Suricata IDS/IPS with Emerging Threats rulesets, EVE JSON logging, and custom rules for high-throughput, protocol-aware traffic inspection (HTTP, TLS, DNS, SMB) and SIEM…

mukul975/Anthropic-Cybersecurity-Skills

Detect Layer 2 ARP poisoning/spoofing by deploying ARPWatch, Dynamic ARP Inspection (DAI), Wireshark packet analysis, and custom Python monitoring scripts that flag gratuitous ARP floods, IP-to-MAC…

mukul975/Anthropic-Cybersecurity-Skills

Detect anomalies in DNP3 communications used in SCADA/ICS systems by monitoring unauthorized control commands, firmware update attempts, protocol violations, and deviations from baseline traffic…

mukul975/Anthropic-Cybersecurity-Skills

Detect data exfiltration via DNS tunneling (tools like iodine, dnscat2, dns2tcp) by analyzing query entropy, subdomain length, query volume to single domains, TXT/CNAME/NULL record abuse, and…

mukul975/Anthropic-Cybersecurity-Skills

Detect anomalies in Modbus/TCP and Modbus RTU industrial traffic via function code monitoring, register range validation, timing analysis, and deep packet inspection, using Zeek's Modbus analyzer…

mukul975/Anthropic-Cybersecurity-Skills

Detects sophisticated cyber-physical attacks that follow the Stuxnet pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation, using PLC logic integrity monitoring…

mukul975/Anthropic-Cybersecurity-Skills

Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process anomaly detection, and file integrity checking on EC2/GCE instances.

mukul975/Anthropic-Cybersecurity-Skills

Deploy Nozomi Networks Guardian sensors for passive OT network traffic analysis, providing asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment…

mukul975/Anthropic-Cybersecurity-Skills

Deploys anomaly detection for OT/ICS environments using machine learning on OT network baselines, physics-based process models, and Modbus/DNP3/OPC UA traffic analysis to flag deviations, rogue…

mukul975/Anthropic-Cybersecurity-Skills

Comprehensive REST API design review with automated linting, breaking-change detection, and design scorecards.

alirezarezvani/claude-skills

A skill your agent uses when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry.

alirezarezvani/claude-skills

Graph database implementation for relationship-heavy data models.

ancoleman/ai-design-components

Smart change detection, auto branch naming, and streamlined commit/PR workflow

sickn33/agentic-awesome-skills

Scans transactions for fraud and anomaly signals — duplicate charges within 48 hours, transactions more than 3 standard deviations above a merchant's historical average, first-ever transaction with…

lyndonkl/claude

Elastic ML anomaly detection — investigation/RCA, score explanation, job lifecycle troubleshooting, and job operations.

elastic/agent-skills

Use Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets.

mukul975/Anthropic-Cybersecurity-Skills

Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection.

mukul975/Anthropic-Cybersecurity-Skills

Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal, web scanner fingerprints, and brute-force patterns.

mukul975/Anthropic-Cybersecurity-Skills

Configures AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring on Linux, covering baseline database creation, scheduled integrity checks via cron, change detection, and…

mukul975/Anthropic-Cybersecurity-Skills