Güvenlik uyarılı skill
Bu skill destructive command içerebilir. Skill detaylarını ve kaynak içeriği incelemeden kurulum yapmayın, kopyalamayın, indirmeyin veya çalıştırmayın. Bilinçli ve kontrollü şekilde kullanın.
Çoklu dosya
researchResmi
Resmi Sağlayıcı Skill'iView repo
Investigate URLs using Common Crawl, live AgentCore browsing and sourced intelligence; produce an actionable analyst assessment.
Dosyalar40 dosya
SKILL.md186 satır
Loading editor…
Kurulum
ÖnerilenTek komut — ajanınız otomatik olarak devreye alır.
Kurulum komutunu görmek için yukarıdan bir AI aracı seçin.
veya
Manuel Kurulum
Daha fazla adımArşivi indirin ve dosyaları projenize manuel olarak ekleyin.
Skill detayları
Versiyonv1.0.0
YazarAWS Labs
Kategoriresearch
Skill IDawslabs/agentic-developer-platform/modules/domain-apps/cyber/agent/skills/url-analysis
Dosyalar40 dosya
İlgili skill'ler
Aidlc Emit IssuesEmit AIDLC inception artifacts as GitHub issues: one EPIC per intent, one child per AIDLC unit, natively sub-issue-linked, each in the repo's mandatory plain-terms opening and five technical sections with deterministic acceptance. Delivery loop generation is a two-stage protocol: Step 7 composes loop drafts as branch artifacts (invoked in Run A after delivery-planning approval); Step 8 materializes the issues from approved drafts (invoked in Run B after loop-proposal approval). Orchestrators, evCodex BridgeDelegate a single bounded coding or code-review task to the OpenAI Codex CLI (runs against Bedrock), then review Codex's output yourself before committing. ONLY use this skill when the triggering issue or comment EXPLICITLY names Codex — e.g. "use Codex", "ask Codex to review this", "pass this to Codex", "have Codex write X". Never invoke it autonomously, speculatively, or because a task merely looks like something Codex could do. If nobody asked for Codex, do the work yourself and do not run thSkypilotUse for issue-driven GPU capacity requests: express workload requirements, let SkyPilot select and provision machines, and prepare those machines for Superplane EKS workloads through the hybrid networking and node-join path.Stage 1 TriageLightweight fingerprinting of a malware sample — hashes, file type, entropy, strings, candidate IOCs. Use this skill whenever you start a 7-stage malware analysis pipeline, need a quick file identification before deeper analysis, or want to check a sample against known-hash databases before committing compute. This is always the first stage and must run before Stage 2 (OSINT), Stage 3 (static), or Stage 4 (dynamic).Stage 2 OsintConsult OSINT sources and synthesize a prior hypothesis that steers downstream analysis. M1 scope is MalwareBazaar (no auth, no vault dependency) + web search + MITRE ATT&CK; VirusTotal + Shodan + urlscan are commented out in the skill until vault credentials are provisioned. Use this skill whenever you have a sample's hashes + candidate IOCs (from Stage 1 triage) and want to check reputation, find prior reporting, or decide whether deeper analysis is worth the compute. Always run after Stage 1 Stage 5 CorrelationCross-reference dynamic findings against threat intel (MISP, VT, web reporting) + MITRE ATT&CK to derive family + TTPs + campaign linkage. Use this skill whenever you have Stage 4 dynamic observations (C2 IPs, mutexes, injection targets) and want to link them to known campaigns, confirm Stage 2's hypothesis, or produce MITRE TTP IDs with specific per-stage evidence. Runs after Stage 4, or after Stage 3 if Stage 4 was unavailable — can work with partial data. Skip on Stage 2 short-circuit.