网络安全运营专家:把终端与网络态势纳入 Agent 的日常安全运营
SkillHub 社区技能「网络安全运营专家」(@user_ce145526/ba-capability-007,v1.0.0)面向 it-ops-security,强调终端与网络态势常态化运营、安全事件监控分析与处置,以及持续改进的运营体系。标签 requires_api_key=false。本文依据官方简介与 SkillHub 安装文档,说明定位、能力边界,以及通过提示词或 skillhub CLI 安装到 Cursor、Claude Code、Codex 等 skills 目录的步骤与注意事项。
Read More网络安全威胁情报日报:自动采集 RSS 与勒索情报并生成邮件日报
SkillHub 社区 Skill「网络安全威胁情报日报」(@user_c516e897/cyber-threat-intel-daily,v1.0.0)面向安全运营场景:支持首次配置向导与自定义 RSS,从 13+ 中英文安全媒体 RSS 与 0.zone 勒索情报平台采集当日数据,由 AI 以情报分析视角撰写结构化日报,并通过 AgentMail 或 SMTP 发送。文章说明 Skill 定位、核心能力,并给出基于 SkillHub CLI 的安装命令与 Cursor、Claude Code、Codex 的 skills 目录对照,典型用法以官方简介的可复现流程为准。
Read Moredsh-ocsf-forwarder: OCSF 1.9.0 Session Activity Forwarder for DeepSeek Harness
The `dsh-ocsf-forwarder` plugin standardizes DeepSeek Harness (DSH) event streams into OCSF 1.9.0 format for Security Operations Center (SOC) use. It handles session lifecycle, tool call classification, and approval decisions, while supporting privacy protection and data integrity chain validation. The plugin must run with a specific version of the DSH agent and can be configured via YAML to send logs to receivers such as Splunk or OTLP. This tool is primarily intended for auditing and data analytics, but it is not a security containment boundary and does not provide detection or alerting capabilities.
Read More