Configuring Windows Event Logging For Detection
mukul975/Anthropic-Cybersecurity-Skills
Configures Windows Event Logging with advanced audit policies to generate high-fidelity security events for threat detection and forensic investigation.
A skill your agent uses when adding timers (setInterval, setTimeout), event listeners (window.addEventListener, document.addEventListener, MediaQueryList.addEventListener), or any other resource…
OfficialCustom licenceAuto-check passed
Install Using Kea Disposables
$ npx skills add PostHog/posthog --skill using-kea-disposables -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install PostHog/posthog using-kea-disposables --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/using-kea-disposables .claude/skills/using-kea-disposables && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "using-kea-disposables" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/using-kea-disposables into .claude/skills/using-kea-disposables/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "using-kea-disposables", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/PostHog/posthog/tree/master/.agents/skills/using-kea-disposablesType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add PostHog/posthog --skill using-kea-disposables -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install PostHog/posthog using-kea-disposables --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/using-kea-disposables .agents/skills/using-kea-disposables && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "using-kea-disposables" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/using-kea-disposables into .agents/skills/using-kea-disposables/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "using-kea-disposables", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add PostHog/posthog --skill using-kea-disposables -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install PostHog/posthog using-kea-disposables --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/using-kea-disposables .cursor/skills/using-kea-disposables && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "using-kea-disposables" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/using-kea-disposables into .cursor/skills/using-kea-disposables/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "using-kea-disposables", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/PostHog/posthog.git --path .agents/skills/using-kea-disposables--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add PostHog/posthog --skill using-kea-disposables -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install PostHog/posthog using-kea-disposables --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/using-kea-disposables .gemini/skills/using-kea-disposables && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "using-kea-disposables" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/using-kea-disposables into .gemini/skills/using-kea-disposables/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "using-kea-disposables", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install PostHog/posthog using-kea-disposablesInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add PostHog/posthog --skill using-kea-disposables -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/using-kea-disposables .github/skills/using-kea-disposables && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "using-kea-disposables" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/using-kea-disposables into .github/skills/using-kea-disposables/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "using-kea-disposables", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add PostHog/posthog --skill using-kea-disposables -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install PostHog/posthog using-kea-disposables --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/using-kea-disposables .opencode/skills/using-kea-disposables && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "using-kea-disposables" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/using-kea-disposables into .opencode/skills/using-kea-disposables/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "using-kea-disposables", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
using-kea-disposables- GitHub stars
- 40k
- Token cost
- ~3k tokens
- SKILL.md length
- 847 words
- Files
- 1
- Skills in repo
- 252
- Repo updated
- First seen
- Licence
- Custom licence
At a glance
A skill your agent uses when adding timers (setInterval, setTimeout), event listeners (window.addEventListener, document.addEventListener, MediaQueryList.addEventListener), or any other resource…
- Adding timers (setInterval
- SKILL.md covers Use this skill when, The pattern, Choosing a key and pauseOnPageHidden, plus 4 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
- Event listeners (window.addEventListener
What it does
Using Kea Disposables is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Use when adding timers (setInterval, setTimeout), event listeners (window.addEventListener, document.addEventListener, MediaQueryList.addEventListener), or any other resource that needs cleanup inside a kea logic. Every logic has cache.disposables.add(setup, key?, options?) and cache.disposables.dispose(key) available via the globally registered disposablesPlugin from the kea-disposables package. Replaces the bare cache.foo = setInterval(...) + beforeUnmount: clearInterval(cache.foo) pattern and auto-pauses…
Its SKILL.md is about 3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
The repository describes itself as: :hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error…
When your agent uses it
- Adding timers (setInterval
- Event listeners (window.addEventListener
- Document.addEventListener
- MediaQueryList.addEventListener)
Example prompts
- “/using-kea-disposables”
What it can do on your machine
Read from SKILL.md and the folder at commit 812e5c6. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are typescript).
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
github.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Using Kea Disposables loads about 3k tokens when it runs. Until then it costs about 149 tokens; SKILL.md has 847 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 847 words (~2,975 tokens).
“Every kea logic in this repo has cache.disposables injected by disposablesPlugin from the kea-disposables package, registered globally in frontend/src/initKea.ts and in frontend/src/toolbar/index.tsx. Reach for it whenever you create a resource that needs explicit teardown — the plugin runs cleanup on…”
- name
- using-kea-disposables
Files
Just SKILL.md in .agents/skills/using-kea-disposables of PostHog/posthog.
Open the folder on GitHubat commit 812e5c6
Used in 1 other repository
We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders. This page covers the copy in PostHog/posthog, which our catalogue first saw on October 7, 2026.
Compare with similar skills
Using Kea Disposables next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Using Kea Disposables this skillPostHog/posthog | 40k | — | ~3k | Automated safety check: Pass | Custom licence | |
| Configuring Windows Event Logging For Detectionmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~1.6k | Automated safety check: Pass | Apache-2.0 | |
| Extracting Windows Event Logs Artifactsmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3.3k | Automated safety check: Pass | Apache-2.0 | |
| Analyzing Windows Event Logs In Splunkmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.8k | Automated safety check: Pass | Apache-2.0 | |
| Eventscoreyhaines31/marketingskills | 54k | — | ~3k | Automated safety check: Pass | MIT | |
| Windows Desktop E2Eaffaan-m/ECC | 276k | 1 repos | ~7.6k | Automated safety check: Pass | MIT |
Similar skills
Extracting Windows Event Logs Artifacts
mukul975/Anthropic-Cybersecurity-Skills
Extract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw, Hayabusa, and EvtxECmd to detect lateral movement, persistence, and privilege escalation.
Analyzing Windows Event Logs In Splunk
mukul975/Anthropic-Cybersecurity-Skills
Analyzes Windows Security, System, and Sysmon event logs in Splunk to detect authentication attacks, privilege escalation, persistence mechanisms, and lateral movement using SPL queries mapped to…
Events
coreyhaines31/marketingskills
When the user wants to plan, run, sponsor, speak at, or get pipeline from events — webinars, conferences, trade shows, meetups, dinners, workshops, virtual summits, or user conferences.
Windows Desktop E2E
affaan-m/ECC
E2E testing for Windows native desktop apps (WPF, WinForms, Win32/MFC, Qt) using pywinauto and Windows UI Automation.
Windows Desktop E2E
affaan-m/ECC
E2E testing for Windows native desktop apps (WPF, WinForms, Win32/MFC, Qt) using pywinauto and Windows UI Automation.
More from PostHog/posthog
All 252 skills in this repo- Official
Authoring Log Alerts
PostHog/posthog
Author useful, low-noise log alerts on services in a PostHog project.
- Official
Autoresolving PR Conflicts
PostHog/posthog
Operating procedure for the conflict-autoresolver agent: sweep open PostHog/posthog PRs that conflict with master, resolve the trivial conflicts (generated artifacts deterministically, source…
- Official
Diagnosing Stacktrace Symbolication
PostHog/posthog
Help users debug PostHog Error Tracking stack-trace symbolication for any supported platform — JavaScript/TypeScript web, React Native (Hermes), Android (Proguard / R8), or iOS / macOS (dSYM).
- Official
Exploring Apm Traces
PostHog/posthog
Investigates distributed application performance using PostHog APM (OpenTelemetry span) data via MCP.
- Official
Exploring LLM Traces
PostHog/posthog
Debug and inspect LLM/AI agent traces using PostHog's MCP tools.
- Official
Investigate Metric
PostHog/posthog
Diagnose why a product metric changed (dropped, spiked, or plateaued) by orchestrating breakdowns, actors, paths, lifecycle, retention, and annotations queries.
Questions about Using Kea Disposables
What does Using Kea Disposables do?
A skill your agent uses when adding timers (setInterval, setTimeout), event listeners (window.addEventListener, document.addEventListener, MediaQueryList.addEventListener), or any other resource…. Using Kea Disposables is an agent skill from PostHog/posthog, published by the product's own GitHub organization.addEventListener), or any other resource that needs cleanup inside a kea logic.
When should I use Using Kea Disposables?
Using Kea Disposables fits situations like: adding timers (setInterval; event listeners (window.addEventListener; document.addEventListener; mediaQueryList.addEventListener).
How do I install Using Kea Disposables in Claude Code?
Run `npx skills add PostHog/posthog --skill using-kea-disposables -a claude-code`. Or copy the skill folder (.agents/skills/using-kea-disposables in PostHog/posthog) into .claude/skills/using-kea-disposables in your project. Claude Code loads it when a task matches its description.
How do I install Using Kea Disposables in Codex?
Run `npx skills add PostHog/posthog --skill using-kea-disposables -a codex`. Or copy the skill folder (.agents/skills/using-kea-disposables in PostHog/posthog) into .agents/skills/using-kea-disposables in your project. Codex loads it when a task matches its description.
Can I use Using Kea Disposables in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add PostHog/posthog --skill using-kea-disposables -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/using-kea-disposables, .gemini/skills/using-kea-disposables, .github/skills/using-kea-disposables and .opencode/skills/using-kea-disposables in your project.
What does Using Kea Disposables need to run?
SKILL.md names no scripts, command-line tools or credentials: Using Kea Disposables is instructions for the agent only.
Does Using Kea Disposables access the network?
SKILL.md names 1 domain. As links in the text: github.com. This is read from the text; nothing was executed.
Is Using Kea Disposables safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Using Kea Disposables use?
Using Kea Disposables has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.
How many tokens does Using Kea Disposables use?
About 3k tokens (SKILL.md is roughly 12k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Using Kea Disposables?
Skills that share tags, products or a category with Using Kea Disposables: Configuring Windows Event Logging For Detection (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Extracting Windows Event Logs Artifacts (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Analyzing Windows Event Logs In Splunk (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Events (coreyhaines31/marketingskills, 54k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Using Kea Disposables?
PostHog (a GitHub organization, an official publisher) maintains it in PostHog/posthog, which has 40,200 GitHub stars. The repository holds 252 skills in this directory. The repository was last updated on October 9, 2026.
Source: PostHog/posthog on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.