All authors
Claude Skills by micsapp
github.com/micsapp1,725 skills2 installs3,696 views
- Analyzing Linux Audit Logs For IntrusionParse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python.Votes: 0GitHub stars: 4
- Analyzing Windows Amcache ArtifactsParse and analyze Windows Amcache.hve registry hive to extract program execution evidence, file metadata, SHA-1 hashes, and device connection history for digital forensics and incident response investigations.Votes: 0GitHub stars: 4
- Detecting Fileless Attacks On EndpointsDetects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent files to disk, evading traditional antivirus. Use when building detections for PowerShell-based attacks, reflective DLL injection, WMI persistence, and registry-resident malware. Activates for requests involving fileless malware detection, in-memory attacks, PowerShell exploitation, or living-off-the-land techniques.Votes: 0GitHub stars: 4
- Detecting Lateral Movement With ZeekDetect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, Pass-the-Hash activity, remote service execution, and anomalous internal connections.Votes: 0GitHub stars: 4
- Detecting Oauth Token TheftDetect OAuth access token theft and misuse by analyzing sign-in logs for impossible travel, new device patterns, token replay from unusual IPs, and anomalous scope requests via Microsoft Graph and Okta APIs.Votes: 0GitHub stars: 4
- Implementing Devsecops Security ScanningIntegrate security scanning into CI/CD pipelines using tools like Semgrep, Trivy, and Gitleaks. Covers SAST, SCA, container scanning, and secret detection with structured JSON output for pipeline gates.Votes: 0GitHub stars: 4
- Implementing Privileged Session MonitoringMonitor and audit privileged user sessions including SSH, RDP, and database access. Tracks session metadata, records commands, detects anomalous activity, and enforces session policies for PAM compliance.Votes: 0GitHub stars: 4
- Performing Active Directory Bloodhound AnalysisUse BloodHound and SharpHound to enumerate Active Directory relationships and identify attack paths from compromised users to Domain Admin.Votes: 0GitHub stars: 4
- Data VisualizationCreate effective data visualizations with Python (matplotlib, seaborn, plotly). Use when building charts, choosing the right chart type for a dataset, creating publication-quality figures, or applying design principles like accessibility and color theory.Votes: 0GitHub stars: 4
- Brand VoiceApply and enforce brand voice, style guide, and messaging pillars across content. Use when reviewing content for brand consistency, documenting a brand voice, adapting tone for different audiences, or checking terminology and style guide compliance.Votes: 0GitHub stars: 4
- Campaign PlanningPlan marketing campaigns with objectives, audience segmentation, channel strategy, content calendars, and success metrics. Use when launching a campaign, planning a product launch, building a content calendar, allocating budget across channels, or defining campaign KPIs.Votes: 0GitHub stars: 4
- Competitive AnalysisResearch competitors and compare positioning, messaging, content strategy, and market presence. Use when analyzing a competitor, building battlecards, identifying content gaps, comparing feature messaging, or preparing competitive positioning recommendations.Votes: 0GitHub stars: 4
- Content CreationDraft marketing content across channels — blog posts, social media, email newsletters, landing pages, press releases, and case studies. Use when writing any marketing content, when you need channel-specific formatting, SEO-optimized copy, headline options, or calls to action.Votes: 0GitHub stars: 4
- Performance AnalyticsAnalyze marketing performance with key metrics, trend analysis, and optimization recommendations. Use when building performance reports, reviewing campaign results, analyzing channel metrics (email, social, paid, SEO), or identifying what's working and what needs improvement.Votes: 0GitHub stars: 4
- Account ResearchResearch a company or person and get actionable sales intel. Works standalone with web search, supercharged when you connect enrichment tools or your CRM. Trigger with "research [company]", "look up [person]", "intel on [prospect]", "who is [name] at [company]", or "tell me about [company]".Votes: 0GitHub stars: 4
- Call PrepPrepare for a sales call with account context, attendee research, and suggested agenda. Works standalone with user input and web research, supercharged when you connect your CRM, email, chat, or transcripts. Trigger with "prep me for my call with [company]", "I'm meeting with [company] prep me", "call prep [company]", or "get me ready for [meeting]".Votes: 0GitHub stars: 4
- Competitive IntelligenceResearch your competitors and build an interactive battlecard. Outputs an HTML artifact with clickable competitor cards and a comparison matrix. Trigger with "competitive intel", "research competitors", "how do we compare to [competitor]", "battlecard for [competitor]", or "what's new with [competitor]".Votes: 0GitHub stars: 4
- Create An AssetGenerate tailored sales assets (landing pages, decks, one-pagers, workflow demos) from deal context. Trigger with "/sales create-asset", "create an asset", "build a demo", "make a landing page", or "mock up a workflow".Votes: 0GitHub stars: 4
- Daily BriefingStart your day with a prioritized sales briefing. Works standalone when you provide meetings and priorities, supercharged when you connect calendar, CRM, and email. Trigger with "morning briefing", "daily brief", "what's on my plate today", "prep my day", or "start my day".Votes: 0GitHub stars: 4
- Draft OutreachResearch a prospect first, then draft personalized outreach. Uses web research by default and can be enhanced with enrichment/CRM/email connectors. Trigger with "draft outreach to [person/company]", "write cold email", or "reach out to [name]".Votes: 0GitHub stars: 4
- Android Reverse EngineeringDecompile Android APK, XAPK, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints (Retrofit, OkHttp, Volley), and trace call flows from UI to network layer. Use when the user wants to decompile, analyze, or reverse engineer Android packages, find API endpoints, or follow call flows.Votes: 0GitHub stars: 4
- NextSurface the most valuable next action by combining task stack, queue state, inbox pressure, health, and goals. Recommends one specific action with rationale. Triggers on "/next", "what should I do", "what's next".Votes: 0GitHub stars: 4
- PipelineEnd-to-end source processing -- seed, reduce, process all claims through reflect/reweave/verify, archive. The full pipeline in one command. Triggers on "/pipeline", "/pipeline [file]", "process this end to end", "full pipeline".Votes: 0GitHub stars: 4
- RefactorPlan vault restructuring from config changes. Compares config.yaml against derivation.md, identifies dimension shifts, shows restructuring plan, executes on approval. Triggers on "/refactor", "restructure vault".Votes: 0GitHub stars: 4
- ReflectFind connections between notes and update MOCs. Requires semantic judgment to identify genuine relationships. Use after /reduce creates notes, when exploring connections, or when a topic needs synthesis. Triggers on "/reflect", "/reflect [note]", "find connections", "update MOCs", "connect these notes".Votes: 0GitHub stars: 4
- ReweaveUpdate old notes with new connections. The backward pass that /reflect doesn't do. Revisit existing notes that predate newer related content, add connections, sharpen claims, consider splits. Triggers on "/reweave", "/reweave [note]", "update old notes", "backward connections", "revisit notes".Votes: 0GitHub stars: 4
- SeedAdd a source file to the processing queue. Checks for duplicates, creates archive folder, moves source from inbox, creates extract task, and updates queue. Triggers on "/seed", "/seed [file]", "queue this for processing".Votes: 0GitHub stars: 4
- TasksView and manage the task stack and processing queue. Shows pending work, active tasks, completed items, and queue state. Triggers on "/tasks", "show tasks", "what's pending", "task list", "queue status".Votes: 0GitHub stars: 4
- ValidateSchema validation for notes. Checks against domain-specific templates. Validates required fields, enum values, description quality, and link health. Non-blocking — warns but doesn't prevent capture. Triggers on "/validate", "/validate [note]", "check schema", "validate note", "validate all".Votes: 0GitHub stars: 4
- VerifyCombined verification — recite (description quality via cold-read prediction) + validate (schema compliance) + review (health checks). Use as a quality gate after creating notes or as periodic maintenance. Triggers on "/verify", "/verify [note]", "verify note quality", "check note health".Votes: 0GitHub stars: 4
- Add DomainAdd a new knowledge domain to your existing system. Derives domain-specific configuration through conversation, generates domain folders, templates, and vocabulary while preserving and connecting to your existing architecture.Votes: 0GitHub stars: 4
- HealthRun condition-based vault health diagnostics. 8 categories — schema compliance, orphan detection, link health, description quality, three-space boundaries, processing throughput, stale notes, MOC coherence. 3 modes — quick (schema+orphans+links), full (all 8), three-space (boundary violations only). Returns actionable FAIL/WARN/PASS report with specific fixes ranked by impact. Triggers on "/health", "check vault health", "maintenance report", "what needs fixing".Votes: 0GitHub stars: 4
- HelpContextual guidance and command discovery. Three modes — narrative (first-time), contextual (mid-task), compact (quick reference). Shows available commands, active skills, and intelligent suggestions based on vault state. Triggers on "/help", "what can I do", "show commands", "how does this work".Votes: 0GitHub stars: 4
- ReseedRe-derive your knowledge system from first principles when structural drift accumulates. Analyzes dimension incoherence, vocabulary mismatch, boundary dissolution, and template divergence. Preserves all content while restructuring architecture.Votes: 0GitHub stars: 4
- SetupScaffold a complete knowledge system. Detects platform, conducts conversation, derives configuration, generates everything. Validates against 15 kernel primitives. Triggers on "/setup", "/setup --advanced", "set up my knowledge system", "create my vault".Votes: 0GitHub stars: 4
- TutorialInteractive walkthrough for new users. Learn by doing — each step creates real content in your vault. Three tracks (researcher, manager, personal) with a universal learning arc. Triggers on "/tutorial", "walk me through", "how do I use this".Votes: 0GitHub stars: 4
- UpgradeApply plugin knowledge base updates to an existing generated system. Consults the Ars Contexta research graph for methodology improvements, proposes skill upgrades with research justification. Never auto-implements. Triggers on "/upgrade", "upgrade skills", "check for improvements", "update methodology".Votes: 0GitHub stars: 4
- Accessibility WcagWeb accessibility patterns for WCAG 2.2 compliance including ARIA, keyboard navigation, screen readers, and testingVotes: 0GitHub stars: 4
- Api Design PatternsREST API design with resource naming, pagination, versioning, and OpenAPI spec generationVotes: 0GitHub stars: 4
- Authentication PatternsAuthentication and authorization patterns including OAuth2, JWT, RBAC, session management, and PKCE flowsVotes: 0GitHub stars: 4
- Aws Cloud PatternsAWS cloud patterns for Lambda, ECS, S3, DynamoDB, and Infrastructure as Code with CDK/TerraformVotes: 0GitHub stars: 4
- Ci Cd PipelinesCI/CD pipeline patterns for GitHub Actions, GitLab CI, testing strategies, and deployment automationVotes: 0GitHub stars: 4
- Continuous LearningAuto-extract patterns from coding sessions, track corrections, and build reusable knowledge with confidence scoringVotes: 0GitHub stars: 4
- Data EngineeringData engineering patterns for ETL pipelines, data warehousing, Apache Spark, and data quality validationVotes: 0GitHub stars: 4
- Database OptimizationQuery optimization, indexing strategies, and database performance tuning for PostgreSQL and MySQLVotes: 0GitHub stars: 4
- Devops AutomationCI/CD pipeline design with GitHub Actions, Docker, Kubernetes, Helm, and GitOps patternsVotes: 0GitHub stars: 4
- Django PatternsDjango architecture patterns including DRF, ORM optimization, signals, middleware, and project structureVotes: 0GitHub stars: 4
- Docker Best PracticesDocker best practices including multi-stage builds, compose patterns, image optimization, and securityVotes: 0GitHub stars: 4
- Frontend ExcellenceModern frontend patterns for React Server Components, performance optimization, and Core Web VitalsVotes: 0GitHub stars: 4
- Git AdvancedAdvanced git workflows including worktrees, bisect, interactive rebase, hooks, and recovery techniquesVotes: 0GitHub stars: 4