Agent Skills by CyberStrikeus
There are 53 agent skills in our directory.
CyberStrikeus publishes 53 AI agent skills in our directory. Browse them below — each links back to its source repository.
Updated June 2026
- AC-19(2)_use-of-personally-owned-portable-storage-devicesUse of Personally Owned Portable Storage Devices
- AU-13(1)_use-of-automated-toolsMonitor open-source information and information sites using [organization-defined].
- CIS Ubuntu 14.04 LTS - 1.4.3 Ensure authentication required for single user modeVerify that authentication is required when booting into single user mode
- CIS Ubuntu 14.04 LTS - 2.2.9 Ensure FTP Server is not enabledVerify that vsftpd FTP server is disabled when not required
- CIS Ubuntu 14.04 LTS - 4.1.1.1 Ensure audit log storage size is configuredConfigure the maximum size of the audit log file to prevent disk space exhaustion
- cis-aws-database-10.8Ensure Monitoring and Alerting is Enabled
- cis-aws-database-11.6Ensure Monitoring and Logging is Enabled
- cis-aws-database-3.12Ensure Database is not Publicly accessible
- cis-aws-database-3.8Ensure to Regularly Patch Systems
- cis-aws-foundations-2.4Ensure no 'root' user account access key exists
- cis-azure-compute-20.8[Legacy] Ensure that VHDs are Encrypted
- cis-azure-foundations-6.1.1.2Ensure Diagnostic Setting captures appropriate categories
- cis-docker-v170-7.5Ensure that swarm manager is run in auto-lock mode
- cis-eks-v160-4.5.1Create administrative boundaries between resources using namespaces (Manual)
- cis-eks-v170-4.2.2Minimize the admission of containers wishing to share the host process ID namespace (Automated)
- cis-eks-v180-4.5.1Create administrative boundaries between resources using namespaces (Manual)
- cis-gke-v170-3.2.7Ensure that the --eventRecordQPS argument is set to 0 or a level which ensures appropriate event capture (Automated)
- cis-gke-v170-3.2.9Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)
- cis-gke-v190-5.10.4Enable Security Posture (Automated)
- cis-k8s-v1110-4.2.11Verify that the RotateKubeletServerCertificate argument is set to true (Manual)
- cis-k8s-v200-1.3.5Ensure that the --root-ca-file argument is set as appropriate (Automated)
- cis-k8s-v200-4.1.7Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)
- cis-ocp-v160-1.1.10Ensure that the Container Network Interface file ownership is set to root:root (Manual)
- cis-ocp-v190-4.1.10Ensure that the kubelet configuration file ownership is set to root:root (Automated)
- cis-oke-v180-3.1.1Ensure that the kubelet-config.json file permissions are set to 644 or more restrictive (Automated)
- cis-tomcat101-10.2Restrict access to the web administration application (Automated)
- cis-tomcat7-v100-10.2Restrict access to the web administration
- cis-tomcat7-v100-2.1Alter the Advertised server.info String
- cis-tomcat7-v100-4.6Restrict access to Tomcat binaries directory
- cis-ubuntu1204-v110-9-3-6Set SSH IgnoreRhosts to Yes
- cis-ubuntu1604-v200-2-1-13Ensure HTTP Proxy Server is not installed
- cis-ubuntu1604-v200-3-5-2-4Ensure a nftables table exists
- cis-ubuntu2004-v300-1-7-9Ensure GDM autorun-never is not overridden
- cis-ubuntu2004-v300-6-3-4-10
- CP-10(6)_component-protectionProtect system components used for recovery and reconstitution.
- MA-4(2)_document-nonlocal-maintenanceDocument Nonlocal Maintenance
- MA-4(4)_authentication-and-separation-of-maintenance-sessionsProtect nonlocal maintenance sessions by: Employing [organization-defined] ; and Separating the maintenance sessions from other network sessions with
- MA-6(3)_automated-support-for-predictive-maintenanceTransfer predictive maintenance data to a maintenance management system using [organization-defined].
- MP-5(4)_cryptographic-protectionCryptographic Protection
- PE-14(1)_automatic-controlsEmploy the following automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system: [organization-defined
- PO.1.3_po13Communicate requirements to all third parties who will provide commercial software components to the organization for reuse by the organization’s o...
- PR.AA-02_praa-02Identities are proofed and bound to credentials based on the context of interactions
- PW.8.2_pw82Scope the testing, design the tests, perform the testing, and document the results, including recording and triaging all discovered issues and recomme
- T1059.010_autohotkey-autoitAdversaries may execute commands and perform malicious tasks using AutoIT and AutoHotKey automation scripts.
- T1189_drive-by-compromiseAdversaries may gain access to a system through a user visiting a website over the normal course of browsing.
- T1204.001_malicious-linkAn adversary may rely upon a user clicking a malicious link in order to gain execution.
- T1491_defacementAdversaries may modify visual content available internally or externally to an enterprise network, thus affecting the integrity of the original content.
- T1496_resource-hijackingAdversaries may leverage the resources of co-opted systems to complete resource-intensive tasks, which may impact system and/or hosted service availability.
- T1568.001_fast-flux-dnsAdversaries may use Fast Flux DNS to hide a command and control channel behind an array of rapidly changing IP addresses linked to a single domain resolution.
- T1584.006_web-servicesAdversaries may compromise access to third-party web services that can be used during targeting.
- wstg-athn-02Testing for Default Credentials
- wstg-clnt-05Testing for CSS Injection
- wstg-conf-07Test HTTP Strict Transport Security