cyber-security-operations SKILL.md skillA

cyber-security-operations from oghie/skillsets is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add oghie/skillsets/cyber-security-operations@git:20240115.0b7c040

Pins git:20240115.0b7c040 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
oghie/skillsets
Path
skills/cyber-security-operations/SKILL.md
Versions recorded
1
Latest version
git:20240115.0b7c040, committed Jan 15, 2024
Size
4,812 bytes
Repository stars
9
License
MIT

Use when performing cybersecurity operations - offensive or.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Cyber Security Operations

## Authorized Use
This skill covers dual-use offensive and defensive techniques. Offensive playbooks
(red-team, penetration testing, credential access, C2, social-engineering simulation)
are for engagements you own or have explicit written authorization to test. Before any
offensive technique, confirm scope, a signed rules-of-engagement, and authority
(tasks/engagement-intake.md), and document every action for the engagement record.
Defensive, detection, forensic, and compliance playbooks assume you operate on systems
you are responsible for.

## Core Rule
Route, do not improvise. This skill does not contain techniques inline - it dispatches to
one self-contained playbook under playbooks/. Every recommendation names the objective,
the strategy basis, the technique's ATT&CK/D3FEND/NIST mapping, and the verification
or detection path.

## First Pass
1. Restate the objective: what outcome, on which systems, by when.
2. Classify the task into one category:
   - `detection-hunting` - detection engineering, threat hunting, SIEM analytics.
   - `soc-incident-response` - SOC operations, triage, incident response, containment.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add oghie/skillsets/cyber-security-operations@sha256:fd1f1e82b4045bad

The line at the top of this page pins the label git:20240115.0b7c040, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_3j4to2wt4gdzonv3.svg)](https://markdownregistry.com/a/art_3j4to2wt4gdzonv3)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Jan 15, 2024.

versioncommittedcommitsizeaudit
git:20240115.0b7c040 latest2024-01-15 0b7c040 4,812 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (4812 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

oghie/skillsets · 9 stars · license MIT · pushed 2026-10-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_3j4to2wt4gdzonv3
GET https://markdownregistry.com/api/v1/resolve?ref=oghie/skillsets/cyber-security-operations
GET https://markdownregistry.com/api/v1/blob/fd1f1e82b4045bada46b29e791813d5635ea16ffa00c63e77e4afcc8edbfc005

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from oghie/skillsets

AGENTS.md AGENTS.md file
oghie/skillsets · AGENTS.md
git:20260714.4998981 · audit A · 9 stars
academic-research-journal SKILL.md skill
oghie/skillsets · skills/academic-research-journal/SKILL.md · Use when evaluating, designing, drafting, revising, stress-testing, or preparing academic articles, empirical research…
v0.1.0 · audit A · 9 stars
android-offsec SKILL.md skill
oghie/skillsets · skills/android-offsec/SKILL.md · Android device offensive security, forensic extraction, and mobile app exploitation. Use this whenever the user needs…
v0.1.0 · audit A · 9 stars
data-architect-engineering SKILL.md skill
oghie/skillsets · skills/data-architect-engineering/SKILL.md · Use when designing, reviewing, modifying, migrating, optimizing, securing, operating, troubleshooting, or…
v0.1.0 · audit A · 9 stars
device-driver-development SKILL.md skill
oghie/skillsets · skills/device-driver-development/SKILL.md · Use when developing, reviewing, debugging, porting, or engineering Linux kernel device drivers, kernel modules, device…
v0.1.0 · audit A · 9 stars
realtime-systems-coding SKILL.md skill
oghie/skillsets · skills/realtime-systems-coding/SKILL.md · Use when designing, implementing, reviewing, debugging, testing, profiling, or porting concurrent, parallel…
v0.1.0 · audit A · 9 stars
software-architecture-engineering-uap SKILL.md skill
oghie/skillsets · skills/software-architecture-engineering-uap/SKILL.md · Use when designing, evaluating, documenting, modernizing, reviewing, refactoring, or implementing software architecture…
v0.1.0 · audit A · 9 stars
tech-leadership SKILL.md skill
oghie/skillsets · skills/tech-leadership/SKILL.md · Use when advising, planning, reviewing, reporting, operating, or improving CTO and technology leadership work across…
v0.1.0 · audit A · 9 stars
uiux-frontend-engineering SKILL.md skill
oghie/skillsets · skills/uiux-frontend-engineering/SKILL.md · Use when designing, reviewing, implementing, or validating UI/UX and frontend experiences for web, mobile, responsive…
v0.1.0 · audit A · 9 stars

Every file in oghie/skillsets

Browse by kind, by grade A, or by owner.