4,960,447 AI resources indexedWorking toward the world’s largest AI resource index.

Agent skills

Reusable instructions for compatible AI agents.

How to use the library

Explore by field

Loading catalog totals…
Browse full catalog

Field counts come from the latest full-catalog snapshot. A resource can belong to several fields and platforms.

Resources

Search results
Search stays within agent skills.
Agent skill

Security Joes AI Analyst

SecOps checks for endpoints: EDR, Sysmon, updates, EVTX on heartbeat, least privilege, network visibility, credential protection (Kerberos/NTLM/pass-the-hash), device inventory and known vulnerabilities, weekly assessment, and skill integrity (hash-on-wake, version-aware). Use when implementing o...

OpenClawDevelopment & Engineering
Demerzels-lab9
Agent skill

Malware Incident Response Skill

Respond to a malware incident following PICERL methodology. Use when malware is detected on endpoints. Orchestrates triage, containment, eradication, and recovery. Works with triage-malware skill for analysis.

OpenClawDevelopment & Engineering
dandye132
Apache-2.0View resource
Agent skill

Security Joes AI Analyst

Guides implementation of SecOps checks for endpoint security, focusing on EDR, Sysmon, and vulnerability assessments.

OpenClawDevelopment & Engineering
kbarbel640-del1
Agent skill

Detecting Evasion Techniques in Endpoint Logs

Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealt...

OpenClawData & Analytics
luokai02
Apache-2.0View resource
Agent skill

Detecting T1003 Credential Dumping with EDR

Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation.

ClaudeCodexOpenClawDevelopment & Engineering
luokai02
Apache-2.0View resource
Agent skill

Detecting T1548 Abuse Elevation Control Mechanism

Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.

ClaudeCodexOpenClawDevelopment & Engineering
luokai02
Apache-2.0View resource
Agent skill · Reference

investigating-insider-threat-indicators

Agent skill for Security Engineer, HR Generalist, Compliance Officer, published by mahipal. Project details and file access are provided by the publisher.

Development & Engineering
mahipal1
Apache-2.0View resource

Platform labels describe intended use. Read each resource's author credits, requirements and available access methods.