sonnet-term 0.1.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1005) hide show
  1. sonnet_term-0.1.0/PKG-INFO +657 -0
  2. sonnet_term-0.1.0/README.md +632 -0
  3. sonnet_term-0.1.0/agent_core.py +1195 -0
  4. sonnet_term-0.1.0/pyproject.toml +75 -0
  5. sonnet_term-0.1.0/setup.cfg +4 -0
  6. sonnet_term-0.1.0/sonnet.py +1562 -0
  7. sonnet_term-0.1.0/sonnet_data/__init__.py +67 -0
  8. sonnet_term-0.1.0/sonnet_data/prompts_enc/bridge_prompt.bin +0 -0
  9. sonnet_term-0.1.0/sonnet_data/prompts_enc/personalities.bin +0 -0
  10. sonnet_term-0.1.0/sonnet_data/prompts_enc/system_prompt.bin +0 -0
  11. sonnet_term-0.1.0/sonnet_data/skills/apple/apple-notes/SKILL.md +94 -0
  12. sonnet_term-0.1.0/sonnet_data/skills/apple/apple-reminders/SKILL.md +130 -0
  13. sonnet_term-0.1.0/sonnet_data/skills/apple/findmy/SKILL.md +131 -0
  14. sonnet_term-0.1.0/sonnet_data/skills/apple/imessage/SKILL.md +102 -0
  15. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/claude-code/SKILL.md +754 -0
  16. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/codex/SKILL.md +151 -0
  17. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/computer-use/SKILL.md +356 -0
  18. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/hermes-agent/SKILL.md +213 -0
  19. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/hermes-cli-automation/SKILL.md +100 -0
  20. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/hermes-gateway-user-management/SKILL.md +207 -0
  21. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/hermes-persona-engineering/SKILL.md +142 -0
  22. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/opencode/SKILL.md +219 -0
  23. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/subagent-fanout-batching/SKILL.md +55 -0
  24. sonnet_term-0.1.0/sonnet_data/skills/autonomous-ai-agents/telegram-userbot-latency/SKILL.md +146 -0
  25. sonnet_term-0.1.0/sonnet_data/skills/creative/architecture-diagram/SKILL.md +148 -0
  26. sonnet_term-0.1.0/sonnet_data/skills/creative/ascii-art/SKILL.md +322 -0
  27. sonnet_term-0.1.0/sonnet_data/skills/creative/ascii-video/SKILL.md +248 -0
  28. sonnet_term-0.1.0/sonnet_data/skills/creative/baoyu-infographic/SKILL.md +237 -0
  29. sonnet_term-0.1.0/sonnet_data/skills/creative/claude-design/SKILL.md +650 -0
  30. sonnet_term-0.1.0/sonnet_data/skills/creative/comfyui/SKILL.md +612 -0
  31. sonnet_term-0.1.0/sonnet_data/skills/creative/design-md/SKILL.md +220 -0
  32. sonnet_term-0.1.0/sonnet_data/skills/creative/excalidraw/SKILL.md +199 -0
  33. sonnet_term-0.1.0/sonnet_data/skills/creative/humanizer/SKILL.md +647 -0
  34. sonnet_term-0.1.0/sonnet_data/skills/creative/manim-video/SKILL.md +275 -0
  35. sonnet_term-0.1.0/sonnet_data/skills/creative/p5js/SKILL.md +558 -0
  36. sonnet_term-0.1.0/sonnet_data/skills/creative/popular-web-designs/SKILL.md +214 -0
  37. sonnet_term-0.1.0/sonnet_data/skills/creative/pretext/SKILL.md +220 -0
  38. sonnet_term-0.1.0/sonnet_data/skills/creative/sketch/SKILL.md +220 -0
  39. sonnet_term-0.1.0/sonnet_data/skills/creative/songwriting-and-ai-music/SKILL.md +308 -0
  40. sonnet_term-0.1.0/sonnet_data/skills/creative/touchdesigner-mcp/SKILL.md +356 -0
  41. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/abusing-dpapi-for-credential-access/SKILL.md +209 -0
  42. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/abusing-shadow-credentials-for-privesc/SKILL.md +185 -0
  43. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/achieving-cmmc-level-2-compliance/SKILL.md +142 -0
  44. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md +245 -0
  45. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-active-directory-acl-abuse/SKILL.md +90 -0
  46. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-android-malware-with-apktool/SKILL.md +66 -0
  47. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-api-gateway-access-logs/SKILL.md +81 -0
  48. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-apt-group-with-mitre-navigator/SKILL.md +290 -0
  49. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-azure-activity-logs-for-threats/SKILL.md +87 -0
  50. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-bootkit-and-rootkit-samples/SKILL.md +361 -0
  51. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-browser-forensics-with-hindsight/SKILL.md +299 -0
  52. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-campaign-attribution-evidence/SKILL.md +241 -0
  53. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-certificate-transparency-for-phishing/SKILL.md +370 -0
  54. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-cloud-storage-access-patterns/SKILL.md +77 -0
  55. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-cobalt-strike-beacon-configuration/SKILL.md +388 -0
  56. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md +66 -0
  57. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-command-and-control-communication/SKILL.md +405 -0
  58. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-cyber-kill-chain/SKILL.md +148 -0
  59. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-disk-image-with-autopsy/SKILL.md +267 -0
  60. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-dns-logs-for-exfiltration/SKILL.md +309 -0
  61. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-docker-container-forensics/SKILL.md +345 -0
  62. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-email-headers-for-phishing-investigation/SKILL.md +365 -0
  63. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-ethereum-smart-contract-vulnerabilities/SKILL.md +71 -0
  64. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-golang-malware-with-ghidra/SKILL.md +320 -0
  65. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-heap-spray-exploitation/SKILL.md +64 -0
  66. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-indicators-of-compromise/SKILL.md +193 -0
  67. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-ios-app-security-with-objection/SKILL.md +206 -0
  68. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-kubernetes-audit-logs/SKILL.md +82 -0
  69. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-linux-audit-logs-for-intrusion/SKILL.md +275 -0
  70. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-linux-elf-malware/SKILL.md +370 -0
  71. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-linux-kernel-rootkits/SKILL.md +139 -0
  72. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-linux-system-artifacts/SKILL.md +339 -0
  73. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-lnk-file-and-jump-list-artifacts/SKILL.md +293 -0
  74. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-macro-malware-in-office-documents/SKILL.md +345 -0
  75. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-malicious-pdf-with-peepdf/SKILL.md +96 -0
  76. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-malicious-url-with-urlscan/SKILL.md +112 -0
  77. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-malware-behavior-with-cuckoo-sandbox/SKILL.md +304 -0
  78. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-malware-family-relationships-with-malpedia/SKILL.md +288 -0
  79. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-malware-persistence-with-autoruns/SKILL.md +129 -0
  80. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-malware-sandbox-evasion-techniques/SKILL.md +71 -0
  81. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-memory-dumps-with-volatility/SKILL.md +313 -0
  82. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-memory-forensics-with-lime-and-volatility/SKILL.md +91 -0
  83. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-mft-for-deleted-file-recovery/SKILL.md +261 -0
  84. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-network-covert-channels-in-malware/SKILL.md +220 -0
  85. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-network-flow-data-with-netflow/SKILL.md +72 -0
  86. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-network-packets-with-scapy/SKILL.md +61 -0
  87. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-network-traffic-for-incidents/SKILL.md +266 -0
  88. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-network-traffic-of-malware/SKILL.md +340 -0
  89. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-network-traffic-with-wireshark/SKILL.md +234 -0
  90. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-office365-audit-logs-for-compromise/SKILL.md +65 -0
  91. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-outlook-pst-for-email-forensics/SKILL.md +354 -0
  92. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-packed-malware-with-upx-unpacker/SKILL.md +311 -0
  93. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-pdf-malware-with-pdfid/SKILL.md +357 -0
  94. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-persistence-mechanisms-in-linux/SKILL.md +72 -0
  95. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-powershell-empire-artifacts/SKILL.md +72 -0
  96. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-powershell-script-block-logging/SKILL.md +77 -0
  97. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-prefetch-files-for-execution-history/SKILL.md +326 -0
  98. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-ransomware-encryption-mechanisms/SKILL.md +361 -0
  99. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-ransomware-leak-site-intelligence/SKILL.md +364 -0
  100. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-ransomware-network-indicators/SKILL.md +90 -0
  101. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-ransomware-payment-wallets/SKILL.md +199 -0
  102. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-sbom-for-supply-chain-vulnerabilities/SKILL.md +309 -0
  103. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-security-logs-with-splunk/SKILL.md +271 -0
  104. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-slack-space-and-file-system-artifacts/SKILL.md +399 -0
  105. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-supply-chain-malware-artifacts/SKILL.md +173 -0
  106. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md +287 -0
  107. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-threat-actor-ttps-with-mitre-navigator/SKILL.md +87 -0
  108. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-threat-intelligence-feeds/SKILL.md +126 -0
  109. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-threat-landscape-with-misp/SKILL.md +82 -0
  110. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-tls-certificate-transparency-logs/SKILL.md +113 -0
  111. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-typosquatting-domains-with-dnstwist/SKILL.md +357 -0
  112. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-uefi-bootkit-persistence/SKILL.md +369 -0
  113. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-usb-device-connection-history/SKILL.md +371 -0
  114. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-web-server-logs-for-intrusion/SKILL.md +79 -0
  115. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-windows-amcache-artifacts/SKILL.md +253 -0
  116. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-windows-event-logs-in-splunk/SKILL.md +306 -0
  117. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-windows-lnk-files-for-artifacts/SKILL.md +329 -0
  118. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-windows-prefetch-with-python/SKILL.md +118 -0
  119. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-windows-registry-for-artifacts/SKILL.md +301 -0
  120. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/analyzing-windows-shellbag-artifacts/SKILL.md +224 -0
  121. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/assessing-vector-and-embedding-weaknesses/SKILL.md +236 -0
  122. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/attacking-entra-id-with-roadtools/SKILL.md +206 -0
  123. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/attacking-oauth-with-device-code-phishing/SKILL.md +245 -0
  124. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-aws-s3-bucket-permissions/SKILL.md +274 -0
  125. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-azure-active-directory-configuration/SKILL.md +275 -0
  126. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-cloud-with-cis-benchmarks/SKILL.md +265 -0
  127. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-entra-id-with-aadinternals/SKILL.md +188 -0
  128. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-foundry-smart-contract-security/SKILL.md +170 -0
  129. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-gcp-iam-permissions/SKILL.md +326 -0
  130. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-kubernetes-cluster-rbac/SKILL.md +354 -0
  131. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-kubernetes-rbac-privilege-escalation/SKILL.md +261 -0
  132. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-mcp-servers-for-tool-poisoning/SKILL.md +218 -0
  133. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-terraform-infrastructure-for-security/SKILL.md +358 -0
  134. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-tls-certificate-transparency-logs/SKILL.md +203 -0
  135. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/auditing-uefi-firmware-with-chipsec/SKILL.md +209 -0
  136. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/automating-ioc-enrichment/SKILL.md +218 -0
  137. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/benchmarking-kubernetes-with-kube-bench/SKILL.md +219 -0
  138. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-adversary-infrastructure-tracking-system/SKILL.md +345 -0
  139. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-attack-pattern-library-from-cti-reports/SKILL.md +327 -0
  140. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-automated-malware-submission-pipeline/SKILL.md +507 -0
  141. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-c2-infrastructure-with-sliver-framework/SKILL.md +212 -0
  142. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-c2-redirector-infrastructure/SKILL.md +213 -0
  143. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-cloud-siem-with-sentinel/SKILL.md +318 -0
  144. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-detection-rule-with-splunk-spl/SKILL.md +261 -0
  145. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-detection-rules-with-sigma/SKILL.md +338 -0
  146. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-devsecops-pipeline-with-gitlab-ci/SKILL.md +263 -0
  147. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-identity-federation-with-saml-azure-ad/SKILL.md +263 -0
  148. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-identity-governance-lifecycle-process/SKILL.md +719 -0
  149. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-incident-response-dashboard/SKILL.md +310 -0
  150. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-incident-response-playbook/SKILL.md +267 -0
  151. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-incident-timeline-with-timesketch/SKILL.md +272 -0
  152. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-ioc-defanging-and-sharing-pipeline/SKILL.md +380 -0
  153. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-ioc-enrichment-pipeline-with-opencti/SKILL.md +276 -0
  154. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-malware-incident-communication-template/SKILL.md +347 -0
  155. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-patch-tuesday-response-process/SKILL.md +227 -0
  156. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-phishing-reporting-button-workflow/SKILL.md +128 -0
  157. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-ransomware-playbook-with-cisa-framework/SKILL.md +207 -0
  158. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-red-team-c2-infrastructure-with-havoc/SKILL.md +323 -0
  159. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-role-mining-for-rbac-optimization/SKILL.md +262 -0
  160. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-soc-escalation-matrix/SKILL.md +223 -0
  161. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-soc-metrics-and-kpi-tracking/SKILL.md +313 -0
  162. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-soc-playbook-for-ransomware/SKILL.md +309 -0
  163. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-super-timelines-with-plaso/SKILL.md +169 -0
  164. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-threat-actor-profile-from-osint/SKILL.md +380 -0
  165. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-threat-feed-aggregation-with-misp/SKILL.md +343 -0
  166. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-threat-hunt-hypothesis-framework/SKILL.md +95 -0
  167. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-threat-intelligence-enrichment-in-splunk/SKILL.md +312 -0
  168. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-threat-intelligence-feed-integration/SKILL.md +342 -0
  169. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-threat-intelligence-platform/SKILL.md +321 -0
  170. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-vulnerability-aging-and-sla-tracking/SKILL.md +291 -0
  171. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-vulnerability-dashboard-with-defectdojo/SKILL.md +251 -0
  172. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-vulnerability-exception-tracking-system/SKILL.md +183 -0
  173. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/building-vulnerability-scanning-workflow/SKILL.md +352 -0
  174. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/bypassing-authentication-with-forced-browsing/SKILL.md +284 -0
  175. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/coercing-authentication-with-coercer-petitpotam/SKILL.md +175 -0
  176. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/collecting-indicators-of-compromise/SKILL.md +272 -0
  177. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/collecting-open-source-intelligence/SKILL.md +151 -0
  178. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/collecting-threat-intelligence-with-misp/SKILL.md +191 -0
  179. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/collecting-volatile-evidence-from-compromised-host/SKILL.md +251 -0
  180. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-api-security-testing/SKILL.md +195 -0
  181. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-cloud-incident-response/SKILL.md +289 -0
  182. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-cloud-penetration-testing/SKILL.md +302 -0
  183. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md +145 -0
  184. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-domain-persistence-with-dcsync/SKILL.md +209 -0
  185. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-external-reconnaissance-with-osint/SKILL.md +183 -0
  186. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-full-scope-red-team-engagement/SKILL.md +202 -0
  187. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-internal-network-penetration-test/SKILL.md +314 -0
  188. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-internal-reconnaissance-with-bloodhound-ce/SKILL.md +198 -0
  189. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-malware-incident-response/SKILL.md +222 -0
  190. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-man-in-the-middle-attack-simulation/SKILL.md +295 -0
  191. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-memory-forensics-with-volatility/SKILL.md +287 -0
  192. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-mobile-app-penetration-test/SKILL.md +226 -0
  193. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-network-penetration-test/SKILL.md +207 -0
  194. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-pass-the-ticket-attack/SKILL.md +105 -0
  195. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-phishing-incident-response/SKILL.md +282 -0
  196. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-post-incident-lessons-learned/SKILL.md +191 -0
  197. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-social-engineering-penetration-test/SKILL.md +370 -0
  198. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-social-engineering-pretext-call/SKILL.md +221 -0
  199. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-spearphishing-simulation-campaign/SKILL.md +173 -0
  200. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/conducting-wireless-network-penetration-test/SKILL.md +188 -0
  201. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-active-directory-tiered-model/SKILL.md +75 -0
  202. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-aws-verified-access-for-ztna/SKILL.md +464 -0
  203. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-certificate-authority-with-openssl/SKILL.md +103 -0
  204. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-host-based-intrusion-detection/SKILL.md +230 -0
  205. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-hsm-for-key-storage/SKILL.md +111 -0
  206. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-identity-aware-proxy-with-google-iap/SKILL.md +413 -0
  207. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-ldap-security-hardening/SKILL.md +95 -0
  208. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-microsegmentation-for-zero-trust/SKILL.md +179 -0
  209. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-multi-factor-authentication-with-duo/SKILL.md +157 -0
  210. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-network-segmentation-with-vlans/SKILL.md +428 -0
  211. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-oauth2-authorization-flow/SKILL.md +171 -0
  212. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-pfsense-firewall-rules/SKILL.md +354 -0
  213. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-snort-ids-for-intrusion-detection/SKILL.md +414 -0
  214. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-suricata-for-network-monitoring/SKILL.md +409 -0
  215. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-tls-1-3-for-secure-communications/SKILL.md +112 -0
  216. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-windows-defender-advanced-settings/SKILL.md +292 -0
  217. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-windows-event-logging-for-detection/SKILL.md +194 -0
  218. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/configuring-zscaler-private-access-for-ztna/SKILL.md +318 -0
  219. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/containing-active-breach/SKILL.md +231 -0
  220. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/continuous-llm-red-teaming-with-promptfoo/SKILL.md +209 -0
  221. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/correlating-security-events-in-qradar/SKILL.md +295 -0
  222. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/correlating-threat-campaigns/SKILL.md +168 -0
  223. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/defending-llms-with-guardrails/SKILL.md +284 -0
  224. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deobfuscating-javascript-malware/SKILL.md +360 -0
  225. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deobfuscating-powershell-obfuscated-malware/SKILL.md +386 -0
  226. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-active-directory-honeytokens/SKILL.md +260 -0
  227. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-cloud-deception-with-decoy-resources/SKILL.md +169 -0
  228. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-cloudflare-access-for-zero-trust/SKILL.md +399 -0
  229. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-decoy-files-for-ransomware-detection/SKILL.md +222 -0
  230. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-edr-agent-with-crowdstrike/SKILL.md +275 -0
  231. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-honeytokens-and-canarytokens/SKILL.md +232 -0
  232. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-osquery-for-endpoint-monitoring/SKILL.md +205 -0
  233. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-palo-alto-prisma-access-zero-trust/SKILL.md +305 -0
  234. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-ransomware-canary-files/SKILL.md +113 -0
  235. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-software-defined-perimeter/SKILL.md +191 -0
  236. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/deploying-tailscale-for-zero-trust-vpn/SKILL.md +436 -0
  237. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/designing-adversary-engagement-with-mitre-engage/SKILL.md +163 -0
  238. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-ai-model-prompt-injection-attacks/SKILL.md +170 -0
  239. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-anomalies-in-industrial-control-systems/SKILL.md +332 -0
  240. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-anomalous-authentication-patterns/SKILL.md +757 -0
  241. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-api-enumeration-attacks/SKILL.md +431 -0
  242. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-arp-poisoning-in-network-traffic/SKILL.md +420 -0
  243. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-attacks-on-historian-servers/SKILL.md +297 -0
  244. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-attacks-on-scada-systems/SKILL.md +722 -0
  245. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-aws-cloudtrail-anomalies/SKILL.md +94 -0
  246. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-aws-credential-exposure-with-trufflehog/SKILL.md +311 -0
  247. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-aws-guardduty-findings-automation/SKILL.md +348 -0
  248. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-aws-iam-privilege-escalation/SKILL.md +66 -0
  249. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-azure-lateral-movement/SKILL.md +85 -0
  250. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-azure-service-principal-abuse/SKILL.md +251 -0
  251. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-azure-storage-account-misconfigurations/SKILL.md +75 -0
  252. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-beaconing-patterns-with-zeek/SKILL.md +89 -0
  253. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-bluetooth-low-energy-attacks/SKILL.md +315 -0
  254. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-broken-object-property-level-authorization/SKILL.md +412 -0
  255. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-business-email-compromise/SKILL.md +150 -0
  256. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-business-email-compromise-with-ai/SKILL.md +150 -0
  257. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-cloud-threats-with-guardduty/SKILL.md +297 -0
  258. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-command-and-control-over-dns/SKILL.md +1379 -0
  259. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-compromised-cloud-credentials/SKILL.md +374 -0
  260. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-container-drift-at-runtime/SKILL.md +243 -0
  261. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-container-escape-attempts/SKILL.md +324 -0
  262. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-container-escape-with-falco-rules/SKILL.md +341 -0
  263. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-container-runtime-threats-with-falco/SKILL.md +285 -0
  264. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-credential-dumping-techniques/SKILL.md +96 -0
  265. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-cryptomining-in-cloud/SKILL.md +362 -0
  266. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-data-and-model-poisoning/SKILL.md +215 -0
  267. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-dcsync-attack-in-active-directory/SKILL.md +159 -0
  268. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-deepfake-audio-in-vishing-attacks/SKILL.md +276 -0
  269. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-dependency-confusion/SKILL.md +224 -0
  270. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-dll-sideloading-attacks/SKILL.md +108 -0
  271. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-dnp3-protocol-anomalies/SKILL.md +365 -0
  272. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-dns-exfiltration-with-dns-query-analysis/SKILL.md +449 -0
  273. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-email-account-compromise/SKILL.md +65 -0
  274. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-email-forwarding-rules-attack/SKILL.md +105 -0
  275. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-entra-offensive-tools-in-graph-logs/SKILL.md +194 -0
  276. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-evasion-techniques-in-endpoint-logs/SKILL.md +269 -0
  277. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-exfiltration-over-dns-with-zeek/SKILL.md +94 -0
  278. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-fileless-attacks-on-endpoints/SKILL.md +182 -0
  279. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-fileless-malware-techniques/SKILL.md +433 -0
  280. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-golden-ticket-attacks-in-kerberos-logs/SKILL.md +109 -0
  281. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-golden-ticket-forgery/SKILL.md +72 -0
  282. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-indirect-prompt-injection/SKILL.md +236 -0
  283. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-insider-data-exfiltration-via-dlp/SKILL.md +85 -0
  284. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-insider-threat-behaviors/SKILL.md +104 -0
  285. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-insider-threat-with-ueba/SKILL.md +72 -0
  286. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-kerberoasting-attacks/SKILL.md +106 -0
  287. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-lateral-movement-in-network/SKILL.md +452 -0
  288. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-lateral-movement-with-splunk/SKILL.md +117 -0
  289. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-lateral-movement-with-zeek/SKILL.md +214 -0
  290. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-living-off-the-land-attacks/SKILL.md +524 -0
  291. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-living-off-the-land-with-lolbas/SKILL.md +74 -0
  292. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-malicious-npm-packages/SKILL.md +199 -0
  293. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-malicious-scheduled-tasks-with-sysmon/SKILL.md +86 -0
  294. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-mimikatz-execution-patterns/SKILL.md +103 -0
  295. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-misconfigured-azure-storage/SKILL.md +277 -0
  296. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-mobile-malware-behavior/SKILL.md +242 -0
  297. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-modbus-command-injection-attacks/SKILL.md +513 -0
  298. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-modbus-protocol-anomalies/SKILL.md +397 -0
  299. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-model-extraction-attacks/SKILL.md +204 -0
  300. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-network-anomalies-with-zeek/SKILL.md +406 -0
  301. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-network-scanning-with-ids-signatures/SKILL.md +310 -0
  302. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-ntlm-relay-with-event-correlation/SKILL.md +768 -0
  303. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-oauth-token-theft/SKILL.md +307 -0
  304. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-pass-the-hash-attacks/SKILL.md +101 -0
  305. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-pass-the-ticket-attacks/SKILL.md +69 -0
  306. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-port-scanning-with-fail2ban/SKILL.md +377 -0
  307. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-privilege-escalation-attempts/SKILL.md +102 -0
  308. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-privilege-escalation-in-kubernetes-pods/SKILL.md +266 -0
  309. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-process-hollowing-technique/SKILL.md +119 -0
  310. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-process-injection-techniques/SKILL.md +371 -0
  311. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-qr-code-phishing-with-email-security/SKILL.md +158 -0
  312. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-ransomware-encryption-behavior/SKILL.md +238 -0
  313. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-ransomware-precursors-in-network/SKILL.md +327 -0
  314. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-rdp-brute-force-attacks/SKILL.md +80 -0
  315. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-rootkit-activity/SKILL.md +313 -0
  316. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-s3-data-exfiltration-attempts/SKILL.md +344 -0
  317. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-secure-boot-bypass/SKILL.md +193 -0
  318. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-serverless-function-injection/SKILL.md +505 -0
  319. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-service-account-abuse/SKILL.md +105 -0
  320. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-shadow-api-endpoints/SKILL.md +384 -0
  321. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-shadow-it-cloud-usage/SKILL.md +68 -0
  322. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-spearphishing-with-email-gateway/SKILL.md +152 -0
  323. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-sql-injection-via-waf-logs/SKILL.md +72 -0
  324. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-stuxnet-style-attacks/SKILL.md +494 -0
  325. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-supply-chain-attacks-in-ci-cd/SKILL.md +90 -0
  326. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-suspicious-oauth-application-consent/SKILL.md +65 -0
  327. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-suspicious-powershell-execution/SKILL.md +105 -0
  328. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-t1003-credential-dumping-with-edr/SKILL.md +191 -0
  329. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-t1055-process-injection-with-sysmon/SKILL.md +180 -0
  330. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-t1548-abuse-elevation-control-mechanism/SKILL.md +144 -0
  331. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-typosquatting-packages/SKILL.md +230 -0
  332. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-typosquatting-packages-in-npm-pypi/SKILL.md +176 -0
  333. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/detecting-wmi-persistence/SKILL.md +101 -0
  334. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/emulating-cloud-attacks-with-stratus-red-team/SKILL.md +224 -0
  335. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/enumerating-cloud-with-cloudfox/SKILL.md +210 -0
  336. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/eradicating-malware-from-infected-systems/SKILL.md +236 -0
  337. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/escaping-containers-to-host/SKILL.md +276 -0
  338. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/evaluating-threat-intelligence-platforms/SKILL.md +169 -0
  339. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/executing-active-directory-attack-simulation/SKILL.md +197 -0
  340. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/executing-nist-rmf-authorization-to-operate/SKILL.md +142 -0
  341. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/executing-phishing-simulation-campaign/SKILL.md +233 -0
  342. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/executing-red-team-engagement-planning/SKILL.md +159 -0
  343. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/executing-red-team-exercise/SKILL.md +200 -0
  344. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-active-directory-certificate-services-esc1/SKILL.md +185 -0
  345. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-active-directory-with-bloodhound/SKILL.md +133 -0
  346. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-adcs-with-certipy/SKILL.md +205 -0
  347. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-api-injection-vulnerabilities/SKILL.md +479 -0
  348. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-aws-with-pacu/SKILL.md +216 -0
  349. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-bgp-hijacking-vulnerabilities/SKILL.md +357 -0
  350. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-broken-function-level-authorization/SKILL.md +379 -0
  351. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-broken-link-hijacking/SKILL.md +239 -0
  352. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-constrained-delegation-abuse/SKILL.md +209 -0
  353. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-deeplink-vulnerabilities/SKILL.md +190 -0
  354. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-excessive-data-exposure-in-api/SKILL.md +390 -0
  355. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-http-request-smuggling/SKILL.md +347 -0
  356. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-idor-vulnerabilities/SKILL.md +313 -0
  357. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-insecure-data-storage-in-mobile/SKILL.md +228 -0
  358. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-insecure-deserialization/SKILL.md +332 -0
  359. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-ipv6-vulnerabilities/SKILL.md +311 -0
  360. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-jwt-algorithm-confusion-attack/SKILL.md +469 -0
  361. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-kerberoasting-with-impacket/SKILL.md +234 -0
  362. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-mass-assignment-in-rest-apis/SKILL.md +242 -0
  363. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-ms17-010-eternalblue-vulnerability/SKILL.md +111 -0
  364. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-nopac-cve-2021-42278-42287/SKILL.md +202 -0
  365. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-nosql-injection-vulnerabilities/SKILL.md +221 -0
  366. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-oauth-misconfiguration/SKILL.md +316 -0
  367. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-prototype-pollution-in-javascript/SKILL.md +241 -0
  368. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-race-condition-vulnerabilities/SKILL.md +248 -0
  369. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-server-side-request-forgery/SKILL.md +354 -0
  370. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-smb-vulnerabilities-with-metasploit/SKILL.md +257 -0
  371. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-sql-injection-vulnerabilities/SKILL.md +205 -0
  372. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-sql-injection-with-sqlmap/SKILL.md +257 -0
  373. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-template-injection-vulnerabilities/SKILL.md +323 -0
  374. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-type-juggling-vulnerabilities/SKILL.md +274 -0
  375. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-vulnerabilities-with-metasploit-framework/SKILL.md +218 -0
  376. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-websocket-vulnerabilities/SKILL.md +424 -0
  377. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/exploiting-zerologon-vulnerability-cve-2020-1472/SKILL.md +228 -0
  378. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/extracting-browser-history-artifacts/SKILL.md +354 -0
  379. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/extracting-config-from-agent-tesla-rat/SKILL.md +207 -0
  380. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/extracting-credentials-from-memory-dump/SKILL.md +371 -0
  381. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/extracting-iocs-from-malware-samples/SKILL.md +396 -0
  382. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/extracting-memory-artifacts-with-rekall/SKILL.md +94 -0
  383. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/extracting-windows-event-logs-artifacts/SKILL.md +343 -0
  384. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/fleet-hunting-with-velociraptor/SKILL.md +197 -0
  385. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/generating-and-analyzing-sboms/SKILL.md +186 -0
  386. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/generating-forensic-timelines-with-hayabusa/SKILL.md +169 -0
  387. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/generating-threat-intelligence-reports/SKILL.md +155 -0
  388. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hardening-docker-containers-for-production/SKILL.md +242 -0
  389. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hardening-docker-daemon-configuration/SKILL.md +330 -0
  390. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hardening-linux-endpoint-with-cis-benchmark/SKILL.md +238 -0
  391. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hardening-windows-endpoint-with-cis-benchmark/SKILL.md +210 -0
  392. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-advanced-persistent-threats/SKILL.md +146 -0
  393. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-bootkits-in-efi-system-partition/SKILL.md +222 -0
  394. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-credential-stuffing-attacks/SKILL.md +105 -0
  395. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-evtx-with-chainsaw/SKILL.md +177 -0
  396. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-anomalous-powershell-execution/SKILL.md +81 -0
  397. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-beaconing-with-frequency-analysis/SKILL.md +177 -0
  398. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-cobalt-strike-beacons/SKILL.md +71 -0
  399. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-command-and-control-beaconing/SKILL.md +120 -0
  400. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-data-exfiltration-indicators/SKILL.md +120 -0
  401. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-data-staging-before-exfiltration/SKILL.md +72 -0
  402. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-dcom-lateral-movement/SKILL.md +686 -0
  403. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-dcsync-attacks/SKILL.md +98 -0
  404. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-defense-evasion-via-timestomping/SKILL.md +359 -0
  405. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-dns-based-persistence/SKILL.md +77 -0
  406. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-dns-tunneling-with-zeek/SKILL.md +156 -0
  407. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-domain-fronting-c2-traffic/SKILL.md +72 -0
  408. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-lateral-movement-via-wmi/SKILL.md +70 -0
  409. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-living-off-the-cloud-techniques/SKILL.md +107 -0
  410. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-living-off-the-land-binaries/SKILL.md +124 -0
  411. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-lolbins-execution-in-endpoint-logs/SKILL.md +184 -0
  412. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-ntlm-relay-attacks/SKILL.md +73 -0
  413. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-persistence-mechanisms-in-windows/SKILL.md +119 -0
  414. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-persistence-via-wmi-subscriptions/SKILL.md +151 -0
  415. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-process-injection-techniques/SKILL.md +76 -0
  416. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-registry-persistence-mechanisms/SKILL.md +107 -0
  417. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-registry-run-key-persistence/SKILL.md +73 -0
  418. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-scheduled-task-persistence/SKILL.md +101 -0
  419. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-shadow-copy-deletion/SKILL.md +102 -0
  420. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-spearphishing-indicators/SKILL.md +130 -0
  421. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-startup-folder-persistence/SKILL.md +69 -0
  422. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-supply-chain-compromise/SKILL.md +101 -0
  423. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-suspicious-scheduled-tasks/SKILL.md +107 -0
  424. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-t1098-account-manipulation/SKILL.md +71 -0
  425. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-unusual-network-connections/SKILL.md +101 -0
  426. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-unusual-service-installations/SKILL.md +70 -0
  427. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-for-webshell-activity/SKILL.md +102 -0
  428. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/hunting-saas-sso-token-abuse/SKILL.md +222 -0
  429. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/igaming-platform-recon/SKILL.md +141 -0
  430. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aes-encryption-for-data-at-rest/SKILL.md +111 -0
  431. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-alert-fatigue-reduction/SKILL.md +337 -0
  432. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-anti-phishing-training-program/SKILL.md +130 -0
  433. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-anti-ransomware-group-policy/SKILL.md +244 -0
  434. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-abuse-detection-with-rate-limiting/SKILL.md +399 -0
  435. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-gateway-security-controls/SKILL.md +468 -0
  436. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-key-security-controls/SKILL.md +414 -0
  437. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-rate-limiting-and-throttling/SKILL.md +481 -0
  438. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-schema-validation-security/SKILL.md +438 -0
  439. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-security-posture-management/SKILL.md +418 -0
  440. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-security-testing-with-42crunch/SKILL.md +364 -0
  441. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-api-threat-protection-with-apigee/SKILL.md +337 -0
  442. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-application-whitelisting-with-applocker/SKILL.md +260 -0
  443. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aqua-security-for-container-scanning/SKILL.md +265 -0
  444. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-attack-path-analysis-with-xm-cyber/SKILL.md +265 -0
  445. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-attack-surface-management/SKILL.md +229 -0
  446. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aws-config-rules-for-compliance/SKILL.md +350 -0
  447. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aws-iam-permission-boundaries/SKILL.md +271 -0
  448. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aws-macie-for-data-classification/SKILL.md +331 -0
  449. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aws-nitro-enclave-security/SKILL.md +461 -0
  450. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aws-security-hub/SKILL.md +234 -0
  451. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-aws-security-hub-compliance/SKILL.md +318 -0
  452. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-azure-ad-privileged-identity-management/SKILL.md +273 -0
  453. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-azure-defender-for-cloud/SKILL.md +329 -0
  454. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-beyondcorp-zero-trust-access-model/SKILL.md +340 -0
  455. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-bgp-security-with-rpki/SKILL.md +339 -0
  456. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-browser-isolation-for-zero-trust/SKILL.md +422 -0
  457. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-canary-tokens-for-network-intrusion/SKILL.md +335 -0
  458. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-cisa-zero-trust-maturity-model/SKILL.md +351 -0
  459. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-cloud-dlp-for-data-protection/SKILL.md +466 -0
  460. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-cloud-security-posture-management/SKILL.md +303 -0
  461. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-cloud-trail-log-analysis/SKILL.md +352 -0
  462. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-cloud-vulnerability-posture-management/SKILL.md +236 -0
  463. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-cloud-waf-rules/SKILL.md +319 -0
  464. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-cloud-workload-protection/SKILL.md +84 -0
  465. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-code-signing-for-artifacts/SKILL.md +235 -0
  466. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-conditional-access-policies-azure-ad/SKILL.md +74 -0
  467. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-conduit-security-for-ot-remote-access/SKILL.md +378 -0
  468. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-container-image-minimal-base-with-distroless/SKILL.md +219 -0
  469. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-container-network-policies-with-calico/SKILL.md +68 -0
  470. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-continuous-security-validation-with-bas/SKILL.md +268 -0
  471. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-data-loss-prevention-with-microsoft-purview/SKILL.md +601 -0
  472. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ddos-mitigation-with-cloudflare/SKILL.md +452 -0
  473. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-deception-based-detection-with-canarytoken/SKILL.md +67 -0
  474. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-delinea-secret-server-for-pam/SKILL.md +450 -0
  475. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-device-posture-assessment-in-zero-trust/SKILL.md +458 -0
  476. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-devsecops-security-scanning/SKILL.md +392 -0
  477. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-diamond-model-analysis/SKILL.md +185 -0
  478. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-digital-signatures-with-ed25519/SKILL.md +91 -0
  479. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-disk-encryption-with-bitlocker/SKILL.md +228 -0
  480. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-dmarc-dkim-spf-email-security/SKILL.md +129 -0
  481. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-dragos-platform-for-ot-monitoring/SKILL.md +370 -0
  482. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ebpf-security-monitoring/SKILL.md +390 -0
  483. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-email-sandboxing-with-proofpoint/SKILL.md +113 -0
  484. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-end-to-end-encryption-for-messaging/SKILL.md +86 -0
  485. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-endpoint-detection-with-wazuh/SKILL.md +71 -0
  486. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-endpoint-dlp-controls/SKILL.md +176 -0
  487. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-envelope-encryption-with-aws-kms/SKILL.md +100 -0
  488. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-epss-score-for-vulnerability-prioritization/SKILL.md +221 -0
  489. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-file-integrity-monitoring-with-aide/SKILL.md +63 -0
  490. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-fuzz-testing-in-cicd-with-aflplusplus/SKILL.md +298 -0
  491. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-gcp-binary-authorization/SKILL.md +288 -0
  492. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-gcp-organization-policy-constraints/SKILL.md +276 -0
  493. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-gcp-vpc-firewall-rules/SKILL.md +314 -0
  494. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-gdpr-data-protection-controls/SKILL.md +194 -0
  495. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-gdpr-data-subject-access-request/SKILL.md +303 -0
  496. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-github-advanced-security-for-code-scanning/SKILL.md +212 -0
  497. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-google-workspace-admin-security/SKILL.md +516 -0
  498. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-google-workspace-phishing-protection/SKILL.md +138 -0
  499. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-google-workspace-sso-configuration/SKILL.md +214 -0
  500. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-hardware-security-key-authentication/SKILL.md +230 -0
  501. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-hashicorp-vault-dynamic-secrets/SKILL.md +630 -0
  502. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-hipaa-security-rule-safeguards/SKILL.md +142 -0
  503. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-honeypot-for-ransomware-detection/SKILL.md +404 -0
  504. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-honeytokens-for-breach-detection/SKILL.md +83 -0
  505. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ics-firewall-with-tofino/SKILL.md +360 -0
  506. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-identity-governance-with-sailpoint/SKILL.md +101 -0
  507. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-identity-verification-for-zero-trust/SKILL.md +249 -0
  508. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-iec-62443-security-zones/SKILL.md +535 -0
  509. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-image-provenance-verification-with-cosign/SKILL.md +336 -0
  510. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-immutable-backup-with-restic/SKILL.md +110 -0
  511. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-infrastructure-as-code-security-scanning/SKILL.md +267 -0
  512. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-iso-27001-information-security-management/SKILL.md +183 -0
  513. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-just-in-time-access-provisioning/SKILL.md +135 -0
  514. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-jwt-signing-and-verification/SKILL.md +95 -0
  515. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-kubernetes-network-policy-with-calico/SKILL.md +337 -0
  516. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-kubernetes-pod-security-standards/SKILL.md +272 -0
  517. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-llm-guardrails-for-security/SKILL.md +231 -0
  518. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-log-forwarding-with-fluentd/SKILL.md +72 -0
  519. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-log-integrity-with-blockchain/SKILL.md +73 -0
  520. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-memory-protection-with-dep-aslr/SKILL.md +109 -0
  521. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-microsegmentation-with-guardicore/SKILL.md +352 -0
  522. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-mimecast-targeted-attack-protection/SKILL.md +162 -0
  523. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-mitre-attack-coverage-mapping/SKILL.md +295 -0
  524. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-mobile-application-management/SKILL.md +183 -0
  525. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-mtls-for-zero-trust-services/SKILL.md +84 -0
  526. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-nerc-cip-compliance-controls/SKILL.md +434 -0
  527. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-access-control/SKILL.md +444 -0
  528. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-access-control-with-cisco-ise/SKILL.md +351 -0
  529. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-deception-with-honeypots/SKILL.md +92 -0
  530. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-intrusion-prevention-with-suricata/SKILL.md +378 -0
  531. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-policies-for-kubernetes/SKILL.md +241 -0
  532. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-segmentation-for-ot/SKILL.md +496 -0
  533. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-segmentation-with-firewall-zones/SKILL.md +349 -0
  534. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-traffic-analysis-with-arkime/SKILL.md +74 -0
  535. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-network-traffic-baselining/SKILL.md +66 -0
  536. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-next-generation-firewall-with-palo-alto/SKILL.md +284 -0
  537. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-opa-gatekeeper-for-policy-enforcement/SKILL.md +395 -0
  538. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ot-incident-response-playbook/SKILL.md +394 -0
  539. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ot-network-traffic-analysis-with-nozomi/SKILL.md +281 -0
  540. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-pam-for-database-access/SKILL.md +101 -0
  541. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-passwordless-auth-with-microsoft-entra/SKILL.md +580 -0
  542. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-passwordless-authentication-with-fido2/SKILL.md +83 -0
  543. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-patch-management-for-ot-systems/SKILL.md +352 -0
  544. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-patch-management-workflow/SKILL.md +321 -0
  545. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-pci-dss-compliance-controls/SKILL.md +150 -0
  546. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-pod-security-admission-controller/SKILL.md +328 -0
  547. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-policy-as-code-with-open-policy-agent/SKILL.md +332 -0
  548. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-privileged-access-management-with-cyberark/SKILL.md +180 -0
  549. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-privileged-access-workstation/SKILL.md +67 -0
  550. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-privileged-session-monitoring/SKILL.md +340 -0
  551. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-proofpoint-email-security-gateway/SKILL.md +165 -0
  552. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-purdue-model-network-segmentation/SKILL.md +451 -0
  553. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ransomware-backup-strategy/SKILL.md +319 -0
  554. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ransomware-kill-switch-detection/SKILL.md +248 -0
  555. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-rapid7-insightvm-for-scanning/SKILL.md +367 -0
  556. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-rbac-hardening-for-kubernetes/SKILL.md +269 -0
  557. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-rsa-key-pair-management/SKILL.md +102 -0
  558. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-runtime-application-self-protection/SKILL.md +78 -0
  559. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-runtime-security-with-tetragon/SKILL.md +303 -0
  560. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-saml-sso-with-okta/SKILL.md +174 -0
  561. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-scim-provisioning-with-okta/SKILL.md +256 -0
  562. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-secret-scanning-with-gitleaks/SKILL.md +345 -0
  563. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-secrets-management-with-vault/SKILL.md +348 -0
  564. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-secrets-scanning-in-ci-cd/SKILL.md +92 -0
  565. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-security-chaos-engineering/SKILL.md +97 -0
  566. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-security-information-sharing-with-stix2/SKILL.md +417 -0
  567. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-security-monitoring-with-datadog/SKILL.md +424 -0
  568. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-semgrep-for-custom-sast-rules/SKILL.md +331 -0
  569. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-siem-correlation-rules-for-apt/SKILL.md +94 -0
  570. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-siem-use-case-tuning/SKILL.md +68 -0
  571. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-siem-use-cases-for-detection/SKILL.md +327 -0
  572. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-sigstore-for-software-signing/SKILL.md +202 -0
  573. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-soar-automation-with-phantom/SKILL.md +420 -0
  574. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-soar-playbook-for-phishing/SKILL.md +126 -0
  575. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-soar-playbook-with-palo-alto-xsoar/SKILL.md +346 -0
  576. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-stix-taxii-feed-integration/SKILL.md +318 -0
  577. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-supply-chain-security-with-in-toto/SKILL.md +309 -0
  578. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-syslog-centralization-with-rsyslog/SKILL.md +85 -0
  579. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-taxii-server-with-opentaxii/SKILL.md +378 -0
  580. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-threat-intelligence-lifecycle-management/SKILL.md +394 -0
  581. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-threat-modeling-with-mitre-attack/SKILL.md +397 -0
  582. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-ticketing-system-for-incidents/SKILL.md +430 -0
  583. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-usb-device-control-policy/SKILL.md +156 -0
  584. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-velociraptor-for-ir-collection/SKILL.md +303 -0
  585. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-vulnerability-management-with-greenbone/SKILL.md +70 -0
  586. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-vulnerability-remediation-sla/SKILL.md +193 -0
  587. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-vulnerability-sla-breach-alerting/SKILL.md +307 -0
  588. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-web-application-logging-with-modsecurity/SKILL.md +76 -0
  589. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-knowledge-proof-for-authentication/SKILL.md +86 -0
  590. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-standing-privilege-with-cyberark/SKILL.md +248 -0
  591. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-trust-dns-with-nextdns/SKILL.md +365 -0
  592. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-trust-for-saas-applications/SKILL.md +322 -0
  593. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-trust-in-cloud/SKILL.md +319 -0
  594. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-trust-network-access/SKILL.md +360 -0
  595. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-trust-network-access-with-zscaler/SKILL.md +177 -0
  596. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-trust-with-beyondcorp/SKILL.md +68 -0
  597. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/implementing-zero-trust-with-hashicorp-boundary/SKILL.md +529 -0
  598. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/integrating-dast-with-owasp-zap-in-pipeline/SKILL.md +256 -0
  599. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/integrating-sast-into-github-actions-pipeline/SKILL.md +328 -0
  600. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/intercepting-mobile-traffic-with-burpsuite/SKILL.md +202 -0
  601. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/investigating-insider-threat-indicators/SKILL.md +312 -0
  602. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/investigating-phishing-email-incident/SKILL.md +336 -0
  603. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/investigating-ransomware-attack-artifacts/SKILL.md +415 -0
  604. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/managing-cloud-identity-with-okta/SKILL.md +309 -0
  605. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/managing-intelligence-lifecycle/SKILL.md +132 -0
  606. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/managing-third-party-vendor-risk/SKILL.md +142 -0
  607. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/mapping-attack-paths-with-bloodhound-ce/SKILL.md +228 -0
  608. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/mapping-mitre-attack-techniques/SKILL.md +165 -0
  609. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/migrating-to-post-quantum-cryptography/SKILL.md +213 -0
  610. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/mobile-app-binary-review/SKILL.md +53 -0
  611. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/modeling-threats-with-opencti/SKILL.md +270 -0
  612. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/monitoring-darkweb-sources/SKILL.md +179 -0
  613. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/monitoring-scada-modbus-traffic-anomalies/SKILL.md +348 -0
  614. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/moving-laterally-with-netexec/SKILL.md +199 -0
  615. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/operating-havoc-c2/SKILL.md +278 -0
  616. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/operating-sliver-c2/SKILL.md +304 -0
  617. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/operationalizing-misp-threat-feeds/SKILL.md +220 -0
  618. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/orchestrating-llm-attacks-with-pyrit/SKILL.md +225 -0
  619. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/parsing-artifacts-with-eric-zimmerman-tools/SKILL.md +170 -0
  620. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-access-recertification-with-saviynt/SKILL.md +291 -0
  621. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-access-review-and-certification/SKILL.md +148 -0
  622. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-active-directory-bloodhound-analysis/SKILL.md +249 -0
  623. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-active-directory-compromise-investigation/SKILL.md +210 -0
  624. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-active-directory-forest-trust-attack/SKILL.md +70 -0
  625. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-active-directory-penetration-test/SKILL.md +290 -0
  626. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-active-directory-vulnerability-assessment/SKILL.md +249 -0
  627. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-adversary-in-the-middle-phishing-detection/SKILL.md +161 -0
  628. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-agentless-vulnerability-scanning/SKILL.md +423 -0
  629. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ai-driven-osint-correlation/SKILL.md +403 -0
  630. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-alert-triage-with-elastic-siem/SKILL.md +257 -0
  631. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-android-app-static-analysis-with-mobsf/SKILL.md +177 -0
  632. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-api-fuzzing-with-restler/SKILL.md +380 -0
  633. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-api-inventory-and-discovery/SKILL.md +444 -0
  634. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-api-rate-limiting-bypass/SKILL.md +420 -0
  635. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-api-security-testing-with-postman/SKILL.md +400 -0
  636. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-arp-spoofing-attack-simulation/SKILL.md +282 -0
  637. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-asset-criticality-scoring-for-vulns/SKILL.md +172 -0
  638. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-authenticated-scan-with-openvas/SKILL.md +275 -0
  639. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-authenticated-vulnerability-scan/SKILL.md +242 -0
  640. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-automated-malware-analysis-with-cape/SKILL.md +182 -0
  641. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-aws-account-enumeration-with-scout-suite/SKILL.md +266 -0
  642. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-aws-privilege-escalation-assessment/SKILL.md +291 -0
  643. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-bandwidth-throttling-attack-simulation/SKILL.md +335 -0
  644. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-binary-exploitation-analysis/SKILL.md +459 -0
  645. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-blind-ssrf-exploitation/SKILL.md +256 -0
  646. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-bluetooth-security-assessment/SKILL.md +92 -0
  647. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-brand-monitoring-for-impersonation/SKILL.md +290 -0
  648. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-clickjacking-attack-test/SKILL.md +441 -0
  649. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-asset-inventory-with-cartography/SKILL.md +256 -0
  650. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-forensics-investigation/SKILL.md +349 -0
  651. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-forensics-with-aws-cloudtrail/SKILL.md +96 -0
  652. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-incident-containment-procedures/SKILL.md +313 -0
  653. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-log-forensics-with-athena/SKILL.md +505 -0
  654. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-native-forensics-with-falco/SKILL.md +87 -0
  655. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-native-threat-hunting-with-aws-detective/SKILL.md +175 -0
  656. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-penetration-testing-with-pacu/SKILL.md +307 -0
  657. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cloud-storage-forensic-acquisition/SKILL.md +362 -0
  658. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-container-escape-detection/SKILL.md +82 -0
  659. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-container-image-hardening/SKILL.md +265 -0
  660. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-container-security-scanning-with-trivy/SKILL.md +77 -0
  661. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-content-security-policy-bypass/SKILL.md +251 -0
  662. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-credential-access-with-lazagne/SKILL.md +261 -0
  663. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cryptographic-audit-of-application/SKILL.md +111 -0
  664. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-csrf-attack-simulation/SKILL.md +365 -0
  665. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-cve-prioritization-with-kev-catalog/SKILL.md +272 -0
  666. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-dark-web-monitoring-for-threats/SKILL.md +270 -0
  667. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-deception-technology-deployment/SKILL.md +305 -0
  668. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-directory-traversal-testing/SKILL.md +331 -0
  669. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-disk-forensics-investigation/SKILL.md +272 -0
  670. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-dmarc-policy-enforcement-rollout/SKILL.md +139 -0
  671. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-dns-enumeration-and-zone-transfer/SKILL.md +275 -0
  672. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-dns-tunneling-detection/SKILL.md +92 -0
  673. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-docker-bench-security-assessment/SKILL.md +153 -0
  674. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-dynamic-analysis-of-android-app/SKILL.md +253 -0
  675. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-dynamic-analysis-with-any-run/SKILL.md +283 -0
  676. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-endpoint-forensics-investigation/SKILL.md +250 -0
  677. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-endpoint-vulnerability-remediation/SKILL.md +242 -0
  678. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-entitlement-review-with-sailpoint-iiq/SKILL.md +491 -0
  679. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-external-network-penetration-test/SKILL.md +358 -0
  680. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-false-positive-reduction-in-siem/SKILL.md +239 -0
  681. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-file-carving-with-foremost/SKILL.md +335 -0
  682. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-firmware-extraction-with-binwalk/SKILL.md +294 -0
  683. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-firmware-malware-analysis/SKILL.md +317 -0
  684. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-fuzzing-with-aflplusplus/SKILL.md +87 -0
  685. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-gcp-penetration-testing-with-gcpbucketbrute/SKILL.md +77 -0
  686. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-gcp-security-assessment-with-forseti/SKILL.md +300 -0
  687. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-graphql-depth-limit-attack/SKILL.md +424 -0
  688. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-graphql-introspection-attack/SKILL.md +526 -0
  689. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-graphql-security-assessment/SKILL.md +341 -0
  690. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-hardware-security-module-integration/SKILL.md +75 -0
  691. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-hash-cracking-with-hashcat/SKILL.md +96 -0
  692. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-http-parameter-pollution-attack/SKILL.md +211 -0
  693. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ics-asset-discovery-with-claroty/SKILL.md +524 -0
  694. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-indicator-lifecycle-management/SKILL.md +148 -0
  695. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-initial-access-with-evilginx3/SKILL.md +224 -0
  696. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-insider-threat-investigation/SKILL.md +260 -0
  697. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ioc-enrichment-automation/SKILL.md +433 -0
  698. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ios-app-security-assessment/SKILL.md +289 -0
  699. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-iot-security-assessment/SKILL.md +202 -0
  700. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ip-reputation-analysis-with-shodan/SKILL.md +305 -0
  701. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-jwt-none-algorithm-attack/SKILL.md +348 -0
  702. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-kerberoasting-attack/SKILL.md +119 -0
  703. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-kubernetes-cis-benchmark-with-kube-bench/SKILL.md +239 -0
  704. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-kubernetes-etcd-security-assessment/SKILL.md +227 -0
  705. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-kubernetes-penetration-testing/SKILL.md +283 -0
  706. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-lateral-movement-detection/SKILL.md +320 -0
  707. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-lateral-movement-with-wmiexec/SKILL.md +213 -0
  708. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-linux-log-forensics-investigation/SKILL.md +302 -0
  709. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-log-analysis-for-forensic-investigation/SKILL.md +325 -0
  710. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-log-source-onboarding-in-siem/SKILL.md +301 -0
  711. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-malware-hash-enrichment-with-virustotal/SKILL.md +351 -0
  712. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-malware-ioc-extraction/SKILL.md +376 -0
  713. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-malware-persistence-investigation/SKILL.md +475 -0
  714. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-malware-triage-with-yara/SKILL.md +381 -0
  715. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-memory-forensics-with-volatility3/SKILL.md +305 -0
  716. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-memory-forensics-with-volatility3-plugins/SKILL.md +243 -0
  717. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-mobile-app-certificate-pinning-bypass/SKILL.md +243 -0
  718. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-mobile-device-forensics-with-cellebrite/SKILL.md +348 -0
  719. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-network-forensics-with-wireshark/SKILL.md +317 -0
  720. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-network-packet-capture-analysis/SKILL.md +264 -0
  721. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-network-traffic-analysis-with-tshark/SKILL.md +64 -0
  722. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-network-traffic-analysis-with-zeek/SKILL.md +422 -0
  723. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-nist-csf-maturity-assessment/SKILL.md +141 -0
  724. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-oauth-scope-minimization-review/SKILL.md +654 -0
  725. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-oil-gas-cybersecurity-assessment/SKILL.md +369 -0
  726. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-open-source-intelligence-gathering/SKILL.md +142 -0
  727. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-osint-with-spiderfoot/SKILL.md +62 -0
  728. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ot-network-security-assessment/SKILL.md +601 -0
  729. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ot-vulnerability-assessment-with-claroty/SKILL.md +315 -0
  730. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ot-vulnerability-scanning-safely/SKILL.md +298 -0
  731. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-packet-injection-attack/SKILL.md +334 -0
  732. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-paste-site-monitoring-for-credentials/SKILL.md +379 -0
  733. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-phishing-simulation-with-gophish/SKILL.md +149 -0
  734. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-physical-intrusion-assessment/SKILL.md +222 -0
  735. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-plc-firmware-security-analysis/SKILL.md +505 -0
  736. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-post-quantum-cryptography-migration/SKILL.md +345 -0
  737. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-power-grid-cybersecurity-assessment/SKILL.md +309 -0
  738. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-privacy-impact-assessment/SKILL.md +288 -0
  739. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-privilege-escalation-assessment/SKILL.md +219 -0
  740. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-privilege-escalation-on-linux/SKILL.md +122 -0
  741. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-privileged-account-access-review/SKILL.md +180 -0
  742. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-privileged-account-discovery/SKILL.md +73 -0
  743. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-purple-team-atomic-testing/SKILL.md +1010 -0
  744. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-purple-team-exercise/SKILL.md +316 -0
  745. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ransomware-response/SKILL.md +260 -0
  746. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ransomware-tabletop-exercise/SKILL.md +264 -0
  747. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-red-team-phishing-with-gophish/SKILL.md +103 -0
  748. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-red-team-with-covenant/SKILL.md +70 -0
  749. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-s7comm-protocol-security-analysis/SKILL.md +439 -0
  750. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-sca-dependency-scanning-with-snyk/SKILL.md +266 -0
  751. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-scada-hmi-security-assessment/SKILL.md +321 -0
  752. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-second-order-sql-injection/SKILL.md +235 -0
  753. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-security-headers-audit/SKILL.md +325 -0
  754. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-serverless-function-security-review/SKILL.md +306 -0
  755. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-service-account-audit/SKILL.md +132 -0
  756. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-service-account-credential-rotation/SKILL.md +305 -0
  757. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-soap-web-service-security-testing/SKILL.md +461 -0
  758. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-soc-tabletop-exercise/SKILL.md +408 -0
  759. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-soc2-type2-audit-preparation/SKILL.md +308 -0
  760. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-sqlite-database-forensics/SKILL.md +373 -0
  761. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ssl-certificate-lifecycle-management/SKILL.md +97 -0
  762. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ssl-stripping-attack/SKILL.md +270 -0
  763. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ssl-tls-inspection-configuration/SKILL.md +296 -0
  764. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ssl-tls-security-assessment/SKILL.md +71 -0
  765. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-ssrf-vulnerability-exploitation/SKILL.md +72 -0
  766. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-static-malware-analysis-with-pe-studio/SKILL.md +313 -0
  767. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-steganography-detection/SKILL.md +355 -0
  768. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-subdomain-enumeration-with-subfinder/SKILL.md +199 -0
  769. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-supply-chain-attack-simulation/SKILL.md +69 -0
  770. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-thick-client-application-penetration-test/SKILL.md +271 -0
  771. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-threat-emulation-with-atomic-red-team/SKILL.md +98 -0
  772. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-threat-hunting-with-elastic-siem/SKILL.md +293 -0
  773. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-threat-hunting-with-yara-rules/SKILL.md +433 -0
  774. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-threat-intelligence-sharing-with-misp/SKILL.md +72 -0
  775. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-threat-landscape-assessment-for-sector/SKILL.md +305 -0
  776. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-threat-modeling-with-owasp-threat-dragon/SKILL.md +217 -0
  777. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-timeline-reconstruction-with-plaso/SKILL.md +335 -0
  778. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-user-behavior-analytics/SKILL.md +260 -0
  779. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-vlan-hopping-attack/SKILL.md +335 -0
  780. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-vulnerability-scanning-with-nessus/SKILL.md +177 -0
  781. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-web-application-firewall-bypass/SKILL.md +265 -0
  782. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-web-application-penetration-test/SKILL.md +208 -0
  783. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-web-application-scanning-with-nikto/SKILL.md +247 -0
  784. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-web-application-vulnerability-triage/SKILL.md +250 -0
  785. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-web-cache-deception-attack/SKILL.md +228 -0
  786. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-web-cache-poisoning-attack/SKILL.md +327 -0
  787. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-wifi-password-cracking-with-aircrack/SKILL.md +283 -0
  788. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md +295 -0
  789. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-wireless-network-penetration-test/SKILL.md +265 -0
  790. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-wireless-security-assessment-with-kismet/SKILL.md +397 -0
  791. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/performing-yara-rule-development-for-detection/SKILL.md +345 -0
  792. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/post-exploiting-microsoft-graph-with-graphrunner/SKILL.md +211 -0
  793. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/prioritizing-vulnerabilities-with-cvss-scoring/SKILL.md +193 -0
  794. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/processing-stix-taxii-feeds/SKILL.md +168 -0
  795. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/profiling-threat-actor-groups/SKILL.md +143 -0
  796. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/recovering-deleted-files-with-photorec/SKILL.md +252 -0
  797. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/recovering-from-ransomware-attack/SKILL.md +340 -0
  798. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/red-teaming-llms-with-garak/SKILL.md +226 -0
  799. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/relaying-ntlm-for-adcs-esc8/SKILL.md +198 -0
  800. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/remediating-s3-bucket-misconfiguration/SKILL.md +320 -0
  801. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/reverse-engineering-android-malware-with-jadx/SKILL.md +361 -0
  802. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/reverse-engineering-dotnet-malware-with-dnspy/SKILL.md +354 -0
  803. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/reverse-engineering-ios-app-with-frida/SKILL.md +259 -0
  804. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/reverse-engineering-malware-with-ghidra/SKILL.md +297 -0
  805. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/reverse-engineering-ransomware-encryption-routine/SKILL.md +313 -0
  806. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/reverse-engineering-rust-malware/SKILL.md +188 -0
  807. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/scanning-container-images-with-grype/SKILL.md +238 -0
  808. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/scanning-containers-with-trivy-in-cicd/SKILL.md +331 -0
  809. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/scanning-docker-images-with-trivy/SKILL.md +271 -0
  810. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/scanning-iac-and-images-with-trivy/SKILL.md +264 -0
  811. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/scanning-infrastructure-with-nessus/SKILL.md +180 -0
  812. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/scanning-kubernetes-manifests-with-kubesec/SKILL.md +307 -0
  813. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/scanning-network-with-nmap-advanced/SKILL.md +215 -0
  814. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-agentic-ai-tool-invocation/SKILL.md +269 -0
  815. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-api-gateway-with-aws-waf/SKILL.md +458 -0
  816. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-aws-iam-permissions/SKILL.md +349 -0
  817. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-aws-lambda-execution-roles/SKILL.md +381 -0
  818. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-azure-with-microsoft-defender/SKILL.md +276 -0
  819. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-container-registry-images/SKILL.md +311 -0
  820. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-container-registry-with-harbor/SKILL.md +248 -0
  821. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-github-actions-workflows/SKILL.md +263 -0
  822. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-helm-chart-deployments/SKILL.md +298 -0
  823. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-historian-server-in-ot-environment/SKILL.md +390 -0
  824. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-kubernetes-on-cloud/SKILL.md +387 -0
  825. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-remote-access-to-ot-environment/SKILL.md +391 -0
  826. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/securing-serverless-functions/SKILL.md +329 -0
  827. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/terminal-screenshot-evidence/SKILL.md +40 -0
  828. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-android-intents-for-vulnerabilities/SKILL.md +194 -0
  829. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-api-authentication-weaknesses/SKILL.md +456 -0
  830. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-api-for-broken-object-level-authorization/SKILL.md +392 -0
  831. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-api-for-mass-assignment-vulnerability/SKILL.md +359 -0
  832. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-api-security-with-owasp-top-10/SKILL.md +355 -0
  833. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-cors-misconfiguration/SKILL.md +349 -0
  834. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-broken-access-control/SKILL.md +369 -0
  835. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-business-logic-vulnerabilities/SKILL.md +363 -0
  836. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-email-header-injection/SKILL.md +234 -0
  837. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-host-header-injection/SKILL.md +236 -0
  838. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-json-web-token-vulnerabilities/SKILL.md +246 -0
  839. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-open-redirect-vulnerabilities/SKILL.md +213 -0
  840. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-sensitive-data-exposure/SKILL.md +377 -0
  841. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-system-prompt-leakage/SKILL.md +215 -0
  842. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-xml-injection-vulnerabilities/SKILL.md +227 -0
  843. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-xss-vulnerabilities/SKILL.md +201 -0
  844. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-xss-vulnerabilities-with-burpsuite/SKILL.md +323 -0
  845. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-for-xxe-injection-vulnerabilities/SKILL.md +358 -0
  846. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-jwt-token-security/SKILL.md +354 -0
  847. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-mobile-api-authentication/SKILL.md +203 -0
  848. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-oauth2-implementation-flaws/SKILL.md +405 -0
  849. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-prompt-injection-in-rag-pipelines/SKILL.md +274 -0
  850. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-ransomware-recovery-procedures/SKILL.md +204 -0
  851. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/testing-websocket-api-security/SKILL.md +446 -0
  852. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/tracking-threat-actor-infrastructure/SKILL.md +339 -0
  853. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/triaging-security-alerts-in-splunk/SKILL.md +224 -0
  854. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/triaging-security-incident/SKILL.md +228 -0
  855. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/triaging-security-incident-with-ir-playbook/SKILL.md +233 -0
  856. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/triaging-vulnerabilities-with-ssvc-framework/SKILL.md +217 -0
  857. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/triaging-windows-with-kape/SKILL.md +192 -0
  858. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/validating-backup-integrity-for-recovery/SKILL.md +212 -0
  859. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/validating-tpm-measured-boot-attestation/SKILL.md +183 -0
  860. sonnet_term-0.1.0/sonnet_data/skills/cybersecurity/verifying-build-provenance-with-slsa-sigstore/SKILL.md +196 -0
  861. sonnet_term-0.1.0/sonnet_data/skills/devops/cloudflare-workers-deploy/SKILL.md +60 -0
  862. sonnet_term-0.1.0/sonnet_data/skills/devops/sdlc-review/SKILL.md +181 -0
  863. sonnet_term-0.1.0/sonnet_data/skills/email/email-inbox-triage/SKILL.md +97 -0
  864. sonnet_term-0.1.0/sonnet_data/skills/free-inference-models/SKILL.md +174 -0
  865. sonnet_term-0.1.0/sonnet_data/skills/github/github-auth/SKILL.md +247 -0
  866. sonnet_term-0.1.0/sonnet_data/skills/github/github-code-review/SKILL.md +481 -0
  867. sonnet_term-0.1.0/sonnet_data/skills/github/github-issues/SKILL.md +370 -0
  868. sonnet_term-0.1.0/sonnet_data/skills/github/github-pr-workflow/SKILL.md +367 -0
  869. sonnet_term-0.1.0/sonnet_data/skills/github/github-repo-management/SKILL.md +516 -0
  870. sonnet_term-0.1.0/sonnet_data/skills/humanize/SKILL.md +412 -0
  871. sonnet_term-0.1.0/sonnet_data/skills/media/auto-clip/SKILL.md +276 -0
  872. sonnet_term-0.1.0/sonnet_data/skills/media/gif-search/SKILL.md +91 -0
  873. sonnet_term-0.1.0/sonnet_data/skills/media/media-analysis/SKILL.md +93 -0
  874. sonnet_term-0.1.0/sonnet_data/skills/media/qwen-image-reverse-api/SKILL.md +62 -0
  875. sonnet_term-0.1.0/sonnet_data/skills/media/qwen-tts/SKILL.md +67 -0
  876. sonnet_term-0.1.0/sonnet_data/skills/media/songsee/SKILL.md +83 -0
  877. sonnet_term-0.1.0/sonnet_data/skills/media/video-download-by-criteria/SKILL.md +80 -0
  878. sonnet_term-0.1.0/sonnet_data/skills/media/video-subtitle-burn/SKILL.md +79 -0
  879. sonnet_term-0.1.0/sonnet_data/skills/media/youtube-content/SKILL.md +76 -0
  880. sonnet_term-0.1.0/sonnet_data/skills/mlops/deepseek-reasoning-jailbreak/SKILL.md +99 -0
  881. sonnet_term-0.1.0/sonnet_data/skills/mlops/evaluation/evaluating-llms-harness/SKILL.md +498 -0
  882. sonnet_term-0.1.0/sonnet_data/skills/mlops/evaluation/weights-and-biases/SKILL.md +598 -0
  883. sonnet_term-0.1.0/sonnet_data/skills/mlops/genspark/SKILL.md +44 -0
  884. sonnet_term-0.1.0/sonnet_data/skills/mlops/huggingface-hub/SKILL.md +81 -0
  885. sonnet_term-0.1.0/sonnet_data/skills/mlops/inference/llama-cpp/SKILL.md +249 -0
  886. sonnet_term-0.1.0/sonnet_data/skills/mlops/inference/serving-llms-vllm/SKILL.md +373 -0
  887. sonnet_term-0.1.0/sonnet_data/skills/mlops/llm-jailbreak-techniques/SKILL.md +376 -0
  888. sonnet_term-0.1.0/sonnet_data/skills/mlops/llm-prefill-jailbreak/SKILL.md +44 -0
  889. sonnet_term-0.1.0/sonnet_data/skills/mlops/llm-provider-openai-compat/SKILL.md +61 -0
  890. sonnet_term-0.1.0/sonnet_data/skills/mlops/llm-refusal-depth-tiers/SKILL.md +208 -0
  891. sonnet_term-0.1.0/sonnet_data/skills/mlops/nous-free-models/SKILL.md +110 -0
  892. sonnet_term-0.1.0/sonnet_data/skills/note-taking/obsidian/SKILL.md +68 -0
  893. sonnet_term-0.1.0/sonnet_data/skills/productivity/airtable/SKILL.md +229 -0
  894. sonnet_term-0.1.0/sonnet_data/skills/productivity/box/SKILL.md +117 -0
  895. sonnet_term-0.1.0/sonnet_data/skills/productivity/document-to-action-items/SKILL.md +81 -0
  896. sonnet_term-0.1.0/sonnet_data/skills/productivity/docx/SKILL.md +127 -0
  897. sonnet_term-0.1.0/sonnet_data/skills/productivity/elevenlabs-tts-cron/SKILL.md +112 -0
  898. sonnet_term-0.1.0/sonnet_data/skills/productivity/google-workspace/SKILL.md +335 -0
  899. sonnet_term-0.1.0/sonnet_data/skills/productivity/maps/SKILL.md +195 -0
  900. sonnet_term-0.1.0/sonnet_data/skills/productivity/meeting-action-items/SKILL.md +87 -0
  901. sonnet_term-0.1.0/sonnet_data/skills/productivity/nano-pdf/SKILL.md +53 -0
  902. sonnet_term-0.1.0/sonnet_data/skills/productivity/notion/SKILL.md +449 -0
  903. sonnet_term-0.1.0/sonnet_data/skills/productivity/ocr-and-documents/SKILL.md +173 -0
  904. sonnet_term-0.1.0/sonnet_data/skills/productivity/pdf/SKILL.md +174 -0
  905. sonnet_term-0.1.0/sonnet_data/skills/productivity/powerpoint/SKILL.md +256 -0
  906. sonnet_term-0.1.0/sonnet_data/skills/productivity/product-price-monitor/SKILL.md +79 -0
  907. sonnet_term-0.1.0/sonnet_data/skills/productivity/screenshot-ocr/SKILL.md +102 -0
  908. sonnet_term-0.1.0/sonnet_data/skills/productivity/teams-meeting-pipeline/SKILL.md +122 -0
  909. sonnet_term-0.1.0/sonnet_data/skills/productivity/weekly-review-planning/SKILL.md +81 -0
  910. sonnet_term-0.1.0/sonnet_data/skills/productivity/xlsx/SKILL.md +105 -0
  911. sonnet_term-0.1.0/sonnet_data/skills/research/arxiv/SKILL.md +282 -0
  912. sonnet_term-0.1.0/sonnet_data/skills/research/bitcoin-onchain-forensics/SKILL.md +60 -0
  913. sonnet_term-0.1.0/sonnet_data/skills/research/blogwatcher/SKILL.md +137 -0
  914. sonnet_term-0.1.0/sonnet_data/skills/research/competitor-news-monitor/SKILL.md +88 -0
  915. sonnet_term-0.1.0/sonnet_data/skills/research/delegated-osint-research/SKILL.md +36 -0
  916. sonnet_term-0.1.0/sonnet_data/skills/research/grounded-citations/SKILL.md +257 -0
  917. sonnet_term-0.1.0/sonnet_data/skills/research/llm-wiki/SKILL.md +507 -0
  918. sonnet_term-0.1.0/sonnet_data/skills/research/polymarket/SKILL.md +77 -0
  919. sonnet_term-0.1.0/sonnet_data/skills/research/remote-freelance-job-hunting/SKILL.md +52 -0
  920. sonnet_term-0.1.0/sonnet_data/skills/research/remote-job-board-aggregation/SKILL.md +82 -0
  921. sonnet_term-0.1.0/sonnet_data/skills/research/remote-job-board-research/SKILL.md +65 -0
  922. sonnet_term-0.1.0/sonnet_data/skills/research/remote-job-board-scraping/SKILL.md +109 -0
  923. sonnet_term-0.1.0/sonnet_data/skills/research/remote-jobs-research/SKILL.md +71 -0
  924. sonnet_term-0.1.0/sonnet_data/skills/research/research-paper-writing/SKILL.md +2377 -0
  925. sonnet_term-0.1.0/sonnet_data/skills/research/solana-token-research/SKILL.md +63 -0
  926. sonnet_term-0.1.0/sonnet_data/skills/research/web-research/SKILL.md +106 -0
  927. sonnet_term-0.1.0/sonnet_data/skills/screenshot-ocr-fallback/SKILL.md +66 -0
  928. sonnet_term-0.1.0/sonnet_data/skills/skill-directory/SKILL.md +1002 -0
  929. sonnet_term-0.1.0/sonnet_data/skills/smart-home/openhue/SKILL.md +112 -0
  930. sonnet_term-0.1.0/sonnet_data/skills/social-media/fb-group-autoposter/SKILL.md +64 -0
  931. sonnet_term-0.1.0/sonnet_data/skills/social-media/reddit-user-harvest/SKILL.md +60 -0
  932. sonnet_term-0.1.0/sonnet_data/skills/social-media/telegram-userbot/SKILL.md +529 -0
  933. sonnet_term-0.1.0/sonnet_data/skills/social-media/telegram-userbot-hermes/SKILL.md +235 -0
  934. sonnet_term-0.1.0/sonnet_data/skills/social-media/userbot-bridge-reliability/SKILL.md +419 -0
  935. sonnet_term-0.1.0/sonnet_data/skills/social-media/x-twitter-sop-engagement/SKILL.md +95 -0
  936. sonnet_term-0.1.0/sonnet_data/skills/social-media/xurl/SKILL.md +436 -0
  937. sonnet_term-0.1.0/sonnet_data/skills/software-development/browser-automation/SKILL.md +141 -0
  938. sonnet_term-0.1.0/sonnet_data/skills/software-development/codebase-inspection/SKILL.md +116 -0
  939. sonnet_term-0.1.0/sonnet_data/skills/software-development/debugging-api-auth/SKILL.md +40 -0
  940. sonnet_term-0.1.0/sonnet_data/skills/software-development/dogfood/SKILL.md +164 -0
  941. sonnet_term-0.1.0/sonnet_data/skills/software-development/github/SKILL.md +56 -0
  942. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-agent-skill-authoring/SKILL.md +214 -0
  943. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-cli-embedding/SKILL.md +68 -0
  944. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-embedded-agent/SKILL.md +92 -0
  945. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-embedded-engine/SKILL.md +100 -0
  946. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-embedded-spawn/SKILL.md +156 -0
  947. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-session-db-file-recovery/SKILL.md +51 -0
  948. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-session-troubleshooting/SKILL.md +83 -0
  949. sonnet_term-0.1.0/sonnet_data/skills/software-development/hermes-userbot-debug/SKILL.md +989 -0
  950. sonnet_term-0.1.0/sonnet_data/skills/software-development/inspecting-hermes-desktop-dom/SKILL.md +159 -0
  951. sonnet_term-0.1.0/sonnet_data/skills/software-development/node-express-backend-hardening/SKILL.md +50 -0
  952. sonnet_term-0.1.0/sonnet_data/skills/software-development/node-inspect-debugger/SKILL.md +319 -0
  953. sonnet_term-0.1.0/sonnet_data/skills/software-development/openai-compatible-api/SKILL.md +62 -0
  954. sonnet_term-0.1.0/sonnet_data/skills/software-development/persona-extraction/SKILL.md +379 -0
  955. sonnet_term-0.1.0/sonnet_data/skills/software-development/plan/SKILL.md +338 -0
  956. sonnet_term-0.1.0/sonnet_data/skills/software-development/ponytail/SKILL.md +35 -0
  957. sonnet_term-0.1.0/sonnet_data/skills/software-development/pyinstaller-wine-crossbuild/SKILL.md +207 -0
  958. sonnet_term-0.1.0/sonnet_data/skills/software-development/python-debugpy/SKILL.md +390 -0
  959. sonnet_term-0.1.0/sonnet_data/skills/software-development/realtime-candlestick-chart/SKILL.md +236 -0
  960. sonnet_term-0.1.0/sonnet_data/skills/software-development/requesting-code-review/SKILL.md +285 -0
  961. sonnet_term-0.1.0/sonnet_data/skills/software-development/safe-mass-code-refactor/SKILL.md +32 -0
  962. sonnet_term-0.1.0/sonnet_data/skills/software-development/selenium-bot-automation/SKILL.md +42 -0
  963. sonnet_term-0.1.0/sonnet_data/skills/software-development/simplify-code/SKILL.md +270 -0
  964. sonnet_term-0.1.0/sonnet_data/skills/software-development/spike/SKILL.md +197 -0
  965. sonnet_term-0.1.0/sonnet_data/skills/software-development/systematic-debugging/SKILL.md +411 -0
  966. sonnet_term-0.1.0/sonnet_data/skills/software-development/telegram-userbot-debug/SKILL.md +657 -0
  967. sonnet_term-0.1.0/sonnet_data/skills/software-development/test-driven-development/SKILL.md +362 -0
  968. sonnet_term-0.1.0/sonnet_data/skills/software-development/textual-chat-dashboard/SKILL.md +176 -0
  969. sonnet_term-0.1.0/sonnet_data/skills/software-development/textual-tui-chat-dashboard/SKILL.md +235 -0
  970. sonnet_term-0.1.0/sonnet_data/skills/software-development/userbot-llm-provider-config/SKILL.md +180 -0
  971. sonnet_term-0.1.0/sonnet_data/skills/software-development/userbot-persona-fleet-edit/SKILL.md +709 -0
  972. sonnet_term-0.1.0/sonnet_data/skills/software-development/userbot-skill-deploy/SKILL.md +285 -0
  973. sonnet_term-0.1.0/sonnet_data/skills/software-development/webview2-app-debugging/SKILL.md +46 -0
  974. sonnet_term-0.1.0/sonnet_data/skills/software-development/webview2-desktop-app/SKILL.md +236 -0
  975. sonnet_term-0.1.0/sonnet_data/skills/software-development/webview2-desktop-app-debug/SKILL.md +68 -0
  976. sonnet_term-0.1.0/sonnet_data/skills/software-development/windows-exe-cross-build/SKILL.md +734 -0
  977. sonnet_term-0.1.0/sonnet_data/skills/soul/SKILL.md +129 -0
  978. sonnet_term-0.1.0/sonnet_data/skills/web/blocked-page-recovery/SKILL.md +137 -0
  979. sonnet_term-0.1.0/sonnet_data/skills/web/tavily-search/SKILL.md +34 -0
  980. sonnet_term-0.1.0/sonnet_data/skills/web3/nft-mint-bot/SKILL.md +92 -0
  981. sonnet_term-0.1.0/sonnet_data/skills/web3/opensea-drop-eligibility/SKILL.md +127 -0
  982. sonnet_term-0.1.0/sonnet_data/skills/web3/opensea-nft-mint-bot/SKILL.md +118 -0
  983. sonnet_term-0.1.0/sonnet_data/skills/writing/no-ai-slop/SKILL.md +97 -0
  984. sonnet_term-0.1.0/sonnet_json.py +1333 -0
  985. sonnet_term-0.1.0/sonnet_term.egg-info/PKG-INFO +657 -0
  986. sonnet_term-0.1.0/sonnet_term.egg-info/SOURCES.txt +1003 -0
  987. sonnet_term-0.1.0/sonnet_term.egg-info/dependency_links.txt +1 -0
  988. sonnet_term-0.1.0/sonnet_term.egg-info/entry_points.txt +2 -0
  989. sonnet_term-0.1.0/sonnet_term.egg-info/requires.txt +4 -0
  990. sonnet_term-0.1.0/sonnet_term.egg-info/top_level.txt +6 -0
  991. sonnet_term-0.1.0/stream_filter.py +325 -0
  992. sonnet_term-0.1.0/tools/__init__.py +7 -0
  993. sonnet_term-0.1.0/tools/ansi2png.py +282 -0
  994. sonnet_term-0.1.0/tools/chatline.py +285 -0
  995. sonnet_term-0.1.0/tools/check_pixels.py +34 -0
  996. sonnet_term-0.1.0/tools/codehl.py +337 -0
  997. sonnet_term-0.1.0/tools/demo_palette.py +36 -0
  998. sonnet_term-0.1.0/tools/panel_shot.py +36 -0
  999. sonnet_term-0.1.0/tools/picker.py +234 -0
  1000. sonnet_term-0.1.0/tools/pty_capture.py +72 -0
  1001. sonnet_term-0.1.0/tools/pty_drive.py +125 -0
  1002. sonnet_term-0.1.0/tools/sesspicker.py +185 -0
  1003. sonnet_term-0.1.0/tools/updater.py +149 -0
  1004. sonnet_term-0.1.0/tools/wizard.py +241 -0
  1005. sonnet_term-0.1.0/tools/xterm256.py +47 -0
@@ -0,0 +1,657 @@
1
+ Metadata-Version: 2.4
2
+ Name: sonnet-term
3
+ Version: 0.1.0
4
+ Summary: Sonnet persona as a terminal CLI, powered by Hermes Agent.
5
+ Author: Sonnet Desktop contributors
6
+ License-Expression: MIT
7
+ Project-URL: Homepage, https://github.com/sonnet-cli/sonnet
8
+ Project-URL: Repository, https://github.com/sonnet-cli/sonnet
9
+ Project-URL: Issues, https://github.com/sonnet-cli/sonnet/issues
10
+ Keywords: cli,agent,hermes,terminal,ai,chat
11
+ Classifier: Development Status :: 4 - Beta
12
+ Classifier: Environment :: Console
13
+ Classifier: Intended Audience :: Developers
14
+ Classifier: Programming Language :: Python :: 3.10
15
+ Classifier: Programming Language :: Python :: 3.11
16
+ Classifier: Programming Language :: Python :: 3.12
17
+ Classifier: Programming Language :: Python :: 3.13
18
+ Classifier: Topic :: Software Development :: Libraries :: Python Modules
19
+ Requires-Python: >=3.10
20
+ Description-Content-Type: text/markdown
21
+ Requires-Dist: pygments>=2.17
22
+ Requires-Dist: cryptography>=41.0
23
+ Requires-Dist: PyYAML>=6.0
24
+ Requires-Dist: pillow>=10.0
25
+
26
+ # sonnet — CLI dari project Sonnet Desktop
27
+
28
+ Versi terminal dari Sonnet (persona KINJI, agent Hermes, skill pack dari
29
+ project aslinya). Folder ini hasil extract dari `SonnetSetup (2).exe` +
30
+ tambahan lapisan CLI.
31
+
32
+ ## Struktur
33
+
34
+ ```
35
+ sonnet launcher bash (pakai .venv)
36
+ sonnet.py entry point: argparse, REPL, oneshot
37
+ sonnet_json.py engine: JsonSession (hermes --format stream-json) + Renderer
38
+ agent_core.py dari project Sonnet (dipakai utuh: boot/setup)
39
+ stream_filter.py dari project Sonnet (dipakai utuh)
40
+ prompts_enc/ dari project Sonnet (AES-GCM, system/bridge/personality)
41
+ skills_pack.zip dari project Sonnet (962 skill)
42
+ hermes_config_template.yaml dari project Sonnet
43
+ .venv/ python + cryptography + pyyaml
44
+ ```
45
+
46
+ ## Arsitektur prompt (UTUH, sama kayak desktop)
47
+
48
+ Boot flow:
49
+
50
+ 1. `JsonSession.boot()` manggil `agent_core.HermesSession`:
51
+ - `_ensure_soul()` — decrypt `prompts_enc/*.bin` (AES-GCM, key dari
52
+ `_derive_key()`), tulis `SOUL.md` ke `HERMES_HOME`. Isi = system_prompt
53
+ (46620 chars) + bridge_prompt (8135 chars).
54
+ - `_ensure_skills()` — extract `skills_pack.zip` (962 SKILL.md) ke
55
+ `HERMES_HOME/skills`.
56
+ - `_ensure_hermes_config()` — generate `.hermes/config.yaml` dari
57
+ `hermes_config_template.yaml`, isi `api_key`/model/reasoning_effort/
58
+ disabled_toolsets.
59
+ - `_ensure_hermes_auth()` — sync token OAuth kalo ada.
60
+ 2. Hermes CLI auto-load `SOUL.md` dari `HERMES_HOME` (identity slot #1,
61
+ always included) → persona KINJI aktif tanpa perlu injection manual.
62
+
63
+ Verifikasi: `test_sonnet_json.py` cek `SOUL.md` hasil boot beneran
64
+ mengandung system_prompt + bridge_prompt (bukan template lain).
65
+
66
+ ## Kenapa stream-json, bukan PTY scraping
67
+
68
+ Desktop app/WebView2 scrape output PTY (`agent_core._spawn_tmux` +
69
+ `stream_filter.HermesStreamFilter`). Itu jalan di WebView2 karena ada
70
+ renderer sendiri yang nge-handle re-render. Di terminal, output PTY
71
+ hermes berantakan: tiap frame full-screen (status bar `☤ model │ ctx │ 0% │
72
+ 21s │ ⚠ YOLO`, spinner, `┌─ box ┐`) nge-overwrite baris, dan yang masuk
73
+ pipe cuma delta — hasil nyata: status bar bocor + baris nyambung nyambung
74
+ (`"Find and fix a failing test────⚠️ Attempt 1/3, not retryable failed: …"`).
75
+
76
+ hermes punya mode resmi: `hermes chat -q … --oneshot --format stream-json`
77
+ → JSONL per event (`system`/`reasoning`/`tool_call`/`tool_result`/
78
+ `assistant`/`result`), deterministik, plus `--resume SESSION_ID` buat
79
+ kelanjutan konteks. CLI pakai itu. PTY scraping tetap ada di `agent_core`
80
+ buat kalau lo mau mode interaktif penuh (TUI) — belum di-wire ke CLI.
81
+
82
+ ## Pakai
83
+
84
+ Sudah di-symlink ke `/usr/local/bin/sonnet`, jadi ga perlu `./`:
85
+
86
+ ```bash
87
+ sonnet # REPL (mode interaktif)
88
+ sonnet "cek disk" # oneshot, langsung keluar
89
+ sonnet -C /path/proyek "fix bug" # agent cwd = /path/proyek
90
+ sonnet -m deepseek-v4-flash "hi"
91
+ sonnet -t terminal,file "list repo"
92
+ sonnet -s obsidian "catatan kemarin"
93
+ sonnet --resume <session_id> "lanjut" # lanjut konteks
94
+ sonnet --sessions # list sesi
95
+ sonnet --models # katalog model live
96
+ sonnet --doctor # cek config + prompt + deps
97
+ sonnet --version # versi CLI + path engine
98
+ sonnet help # help lengkap (juga /help di REPL)
99
+ ```
100
+
101
+ ### Slash command di REPL
102
+
103
+ | command | fungsi |
104
+ |---|---|
105
+ | teks apa aja | kirim ke agent |
106
+ | `/model` | **picker model interaktif** (ketik filter, enter pilih) |
107
+ | `/model <nama>` | set model langsung |
108
+ | `/key` | status key semua provider |
109
+ | `/key <provider> <key>` | simpan api key provider itu |
110
+ | `/new [nama]` | sesi baru, konteks bersih |
111
+ | `/sessions` | list sesi tersimpan, `*` = aktif |
112
+ | `/resume <sid>` | lanjut sesi |
113
+ | `/reasoning <lv>` | none/low/medium/high/max |
114
+ | `/tools <list>` | pilih toolsets |
115
+ | `/stop` | interrupt turn |
116
+ | `/clear` | bersihkan layar |
117
+ | `/doctor` | cek config |
118
+ | `/quit` `/q` | keluar |
119
+ | `/help` | bantuan |
120
+
121
+ Ctrl-C membatalkan turn, Ctrl-D keluar dari REPL.
122
+
123
+ ### Fokus folder (`-C` / `/cd`)
124
+
125
+ ```bash
126
+ sonnet -C ~/proj/proyek # agent kerja di folder itu
127
+ sonnet # ingat folder terakhir
128
+ ```
129
+
130
+ di REPL: `/cd ~/proj/proyek`, `/cd` (balik ke home), `/cd` lagi buat cek.
131
+ `-C` kesimpen di config, jadi `sonnet` berikutnya inget.
132
+
133
+ `HERMES_HOME` (SOUL.md, 973 skill, config, auth) **selalu** di project
134
+ sonnet — bukan di folder target. Waktu dulu `workdir` dipakai buat dua
135
+ hal sekaligus, jadi `sonnet -C ~/proj` nulis 460MB `.hermes` ke dalam
136
+ repo lo. Sekarang dipisah: `workdir` = state, `agent_cwd` = folder kerja
137
+ agent. Yang ngaruh ke tool (file/terminal/search) cuma `agent_cwd`, lewat
138
+ `TERMINAL_CWD` + `terminal.cwd` di config.yaml.
139
+
140
+ ### Shim `hermes` global
141
+
142
+ `~/.hermes/hermes-agent/.hermes/bin/hermes` di-rewrite tiap kali hermes
143
+ dijalankan — baris `exec` diisi path absolut ke `<HERMES_HOME>/tools/python-*`,
144
+ dan HERMES_HOME diturunkan dari **PWD**, bukan env. Jalankan `hermes` dari
145
+ folder yang `.hermes/tools`-nya ga ada, shim ditulis ulang nunjukin path
146
+ itu; panggilan berikutnya → `python3: not found`, exit 127, semua hermes
147
+ mati.
148
+
149
+ CLI memanggil `repair_hermes_shim()` di `main()` sebelum nge-hermes,
150
+ jadi tiap `sonnet` /= nyelametin shim global. Test suiteounty ngecek
151
+ repair + idempotenya.
152
+
153
+ ### Sama kayak Claude CLI?
154
+
155
+ Mirip secara interaksi, beda di implementation:
156
+
157
+ | | Claude CLI | sonnet |
158
+ |---|---|---|
159
+ | REPL + slash command | ya | ya, subset di atas |
160
+ | oneshot | `claude -p "..."` | `sonnet "..."` |
161
+ | ganti model saat jalan | `/model` | `/model` (picker) |
162
+ | `-C` working dir | ya | ya |
163
+ | resume sesi | `--resume` | `--resume` + `/sessions` |
164
+ | ENGINE | Claude | **hermes** |
165
+ | prompt/SOUL | prompt Claude | **SOUL.md project lo** (dari `prompts_enc`) |
166
+ | skills | Claude skills | **skills_pack desktop, 973 SKILL.md** |
167
+ | provider | hanya Anthropic | 10 provider + portal Nous |
168
+
169
+ Jadi ini Claude-CLI-shaped, tapi isi otaknya project lo.
170
+
171
+ ## Pilih model
172
+
173
+ `/model` buka picker interaktif ala Claude Code: kursor `↑↓`, filter
174
+ ketik, `Enter` = pilih + simpan jadi default, `s` = sesi ini saja, `Esc`
175
+ batal. Nomor juga masih jalan (ketik angka) buat muscle memory lama.
176
+
177
+ Katalog diambil live dari API portal (421 model, 9 free), dicache 10
178
+ menit. Model `:free` **atau** yang pricing-nya 0/0 otomatis trigger
179
+ provider `nous`.
180
+
181
+ ```bash
182
+ sonnet --models # list model tanpa masuk REPL
183
+ sonnet -p nous -m 'stealth/space-bunny-alpha' # set di flag juga bisa
184
+ ```
185
+
186
+ Tombol `s` (session-only) nulis ke `session_override.json`, bukan ke
187
+ `config.json` — jadi restart balik ke model default. Pilih `Enter` lagi
188
+ buat promotedin jadi default permanen.
189
+
190
+ ## Login portal dari CLI
191
+
192
+ `sonnet --auth <aksi>` — wrapper atas `hermes auth nous`:
193
+
194
+ ```bash
195
+ sonnet --auth login # device flow: prints URL + kode
196
+ sonnet --auth status # nous: logged in
197
+ sonnet --auth list # detail kredensial (rate limit / 401)
198
+ sonnet --auth refresh # refresh token OAuth
199
+ sonnet --auth reset # bersihin cooldown
200
+ sonnet --auth logout
201
+ ```
202
+
203
+ ## Test
204
+
205
+ ```bash
206
+ .venv/bin/python test_sonnet_json.py # engine + prompt arch + integrasi hermes
207
+ .venv/bin/python test_sonnet_cli.py # presentation layer (mode lama)
208
+ ```
209
+
210
+ ## Yang BELUM dites
211
+
212
+ Integrasi end-to-end pake API key asli. Semua run test pake key palsu
213
+ (`sk-fake...`) → model menolak (401), jadi yang terbukti: pipeline JSONL,
214
+ capture session_id, rendering event, boot/prompt/skills/config. Balasan
215
+ model sungguhan belum pernah diuji.
216
+
217
+ ## Dependency
218
+
219
+ - python 3.10+ (venv: `cryptography`, `pyyaml`)
220
+ - `hermes` CLI di PATH (`~/.local/bin/hermes`)
221
+
222
+ ## Config
223
+
224
+ Default `SONNET_HOME=~/.sonnet`:
225
+ - `config.json` (chmod 600, berisi api_key)
226
+ - `history.jsonl` (riwayat prompt)
227
+ - `~/.hermes/` di cwd project → SOUL.md, skills, config.yaml, sessions
228
+
229
+ ## Provider: DeepSeek (default) vs Nous Portal (free)
230
+
231
+ CLI ini support dua provider:
232
+
233
+ ### DeepSeek (butuh API key bayar)
234
+
235
+ ```bash
236
+ export DEEPSEEK_API_KEY=sk-...
237
+ ./sonnet
238
+ ./sonnet -m deepseek-v4-pro "cek disk"
239
+ ```
240
+
241
+ ### Nous Portal (OAuth, model free)
242
+
243
+ Portal pake token OAuth dari `~/.hermes/auth.json`, bukan api key. CLI
244
+ sync `auth.json` itu ke `HERMES_HOME` folder project tiap boot (token
245
+ di-refresh per jam, jadi mtime dicek).
246
+
247
+ ```bash
248
+ sonnet -p nous -m 'stealth/space-bunny-alpha' "halo"
249
+ ./sonnet -p nous -m 'meituan/longcat-2.0:free' --reasoning none "halo"
250
+ ```
251
+
252
+ Cara login manual di server (kalau `auth.json` belum ada / token mati):
253
+
254
+ ```bash
255
+ hermes auth upgrade --no-browser
256
+ ```
257
+
258
+ `--no-browser` mencetak URL + kode device flow. Buka URL-nya di browser
259
+ lo, login, paste kode balik ke terminal. Setelah itu `hermes auth status nous`
260
+ harus bilang `nous: logged in`.
261
+
262
+ Cek status kredensial:
263
+
264
+ ```bash
265
+ hermes auth list nous # detail per kredensial (rate limit, 401, dll)
266
+ hermes auth reset nous # bersihin status cooldown/exhausted
267
+ ```
268
+
269
+ ### Model gratis di portal — cek `pricing`, bukan suffix
270
+
271
+ Ambil katalog live (9 dari 421 model gratis):
272
+
273
+ ```bash
274
+ sonnet --models
275
+ ```
276
+
277
+ **Gratis itu dua bentuk.** `stealth/space-bunny-alpha` jalan dgn saldo 0
278
+ padahal TIDAK berakhiran `:free` — di katalog entry-nya:
279
+
280
+ ```json
281
+ "pricing": { "prompt": "0.0000000000", "completion": "0.0000000000" }
282
+ ```
283
+
284
+ Jadi filter gratis = suffix `:free` **ATAU** `pricing.prompt == 0 and
285
+ pricing.completion == 0`. 8 dari 9 model gratis berakhiran `:free`, jadi
286
+ andalkan suffix doang bakal kehilangan model gratis terbaik. `portal_models()`
287
+ di CLI sekarang cek keduanya.
288
+
289
+ Status per model (hasil probe langsung ke inference API, 28 Sep 2026):
290
+
291
+ | model | status | ctx | catatan |
292
+ |---|---|---|---|
293
+ | `stealth/space-bunny-alpha` | hidup | 1M | pricing 0/0, multimodal, reasoning adjustable |
294
+ | `meituan/longcat-2.5-preview:free` | hidup | 1M | |
295
+ | `upstage/solar-pro4:free` | hidup | 512k | |
296
+ | `poolside/laguna-s-2.1:free` | hidup | 256k | |
297
+ | `poolside/laguna-xs-2.1:free` | hidup | 256k | |
298
+ | `inclusionai/ling-3.0-flash-sante:free` | hidup | 256k | |
299
+ | `stepfun/step-3.7-flash:free` | 429 | 256k | fair-share limit, per model |
300
+ | `meituan/longcat-2.0:free` | 404 | 1M | "no longer free" |
301
+ | `inclusionai/ling-3.0-flash-fin:free` | 404 | 256k | entri katalog, endpoint mati |
302
+
303
+ Katalog `/models` nampilin semua slug termasuk yg mati, jadi **katalog bukan
304
+ sumber kebenaran** — probe yang jujur.
305
+
306
+ Model paid tetap gabisa dipakai dgn saldo 0:
307
+ > Your Nous Portal account has no active subscription or usable credits
308
+ > (usable $0.00, subscription $0.00, purchased $0.00)
309
+
310
+ ### Live tool status
311
+
312
+ Baris status tool ditulis in-place: spinner braille berputar selama tool
313
+ jalan, lalu diganti `✓`/`✗` + durasi pas selesai. Di non-TTY (pipe ke log)
314
+ jatuh ke mode statis, jadi `\r` + spinner di log cuma jadi sampah.
315
+
316
+ ```
317
+ ❯ list 3 file python di cwd
318
+
319
+ ⠋ search_files /root/sonnet-cli 0.1s
320
+ ✓ terminal wc -l sonnet.py sonnet_json.py 0.2s
321
+
322
+ 3 file python di cwd: ...
323
+ ── 588 in · 343 out
324
+ ```
325
+
326
+ Spinner di-overwrite di satu baris, bukan nambah baris per frame.
327
+
328
+ ## Install
329
+
330
+ ### Unix (macOS / Linux / WSL)
331
+
332
+ ```bash
333
+ curl -fsSL https://sonnet-cli.dev/install.sh | bash
334
+ ```
335
+
336
+ ### Windows (PowerShell)
337
+
338
+ ```powershell
339
+ iex (irm https://sonnet-cli.dev/install.ps1)
340
+ ```
341
+
342
+ Installer cek Python 3.10+, cek/install Hermes (engine), download sonnet
343
+ ke `~/.sonnet/app`, bikin venv, taruh launcher di `~/.local/bin/sonnet`,
344
+ lalu jalanin wizard provider sekali aja. Setelah itu user tinggal
345
+ `sonnet`.
346
+
347
+ ### Update
348
+
349
+ ```bash
350
+ sonnet --update # update sonnet + hermes
351
+ sonnet --update --no-hermes # sonnet saja
352
+ ```
353
+
354
+ ### Dari sumber (developer)
355
+
356
+ ```bash
357
+ git clone https://github.com/sonnet-cli/sonnet
358
+ cd sonnet
359
+ python3 -m venv .venv && .venv/bin/pip install -r requirements.txt
360
+ ln -s "$PWD/sonnet" ~/.local/bin/sonnet
361
+ ```
362
+
363
+ ## Install
364
+
365
+ ### pip (recommended)
366
+
367
+ ```bash
368
+ pip install sonnet-term
369
+ sonnet
370
+ ```
371
+
372
+ Package name: `sonnet-term` — `sonnet` dan `sonnet-cli` sudah dipakai di
373
+ PyPI (library lain: graph library dan Typer/rich building blocks).
374
+ Binary-nya tetap bernama `sonnet`, jadi user selalu tulis `sonnet`.
375
+
376
+ `pip install` **tidak** menarik Hermes Agent: engine itu ~100MB dan
377
+ user mungkin udah punya versi sendiri. Setelah install, `sonnet` akan
378
+ deteksi Hermes; kalau belum ada, wizard nunjukin command install-nya.
379
+ Set `SONNET_SKIP_HERMES=1` untuk lewati pengecekan.
380
+
381
+ ### curl (unix)
382
+
383
+ ```bash
384
+ curl -fsSL https://sonnet-cli.dev/install.sh | bash
385
+ ```
386
+
387
+ ### PowerShell (windows)
388
+
389
+ ```powershell
390
+ iex (irm https://sonnet-cli.dev/install.ps1)
391
+ ```
392
+
393
+ Kedua installer cek Python 3.10+, cek/install Hermes, taruh sonnet di
394
+ `~/.sonnet/app`, bikin venv, symlink (unix) atau `sonnet.cmd` (windows),
395
+ lalu jalanin wizard provider sekali aja.
396
+
397
+ ### Dari sumber (developer)
398
+
399
+ ```bash
400
+ git clone https://github.com/sonnet-cli/sonnet
401
+ cd sonnet
402
+ python3 -m venv .venv && .venv/bin/pip install -r requirements.txt
403
+ ./sonnet
404
+ ```
405
+
406
+ ### Update
407
+
408
+ ```bash
409
+ sonnet --update # update sonnet + hermes
410
+ sonnet --update --no-hermes # sonnet saja
411
+ ```
412
+
413
+ ### Di mana state/config
414
+
415
+ | apa | unix | windows |
416
+ |---|---|---|
417
+ | config + history | `~/.sonnet/` | `%USERPROFILE%\.sonnet\` |
418
+ | Hermes state (SQLite, skills, SOUL.md) | `~/.sonnet/hermes/` | `%USERPROFILE%\.sonnet\hermes\` |
419
+ | install (curl/ps1) | `~/.sonnet/app/` | `%USERPROFILE%\.sonnet\app\` |
420
+ | install (pip) | site-packages | site-packages |
421
+
422
+ Untuk install `pip`, state otomatis pindah ke `~/.sonnet/hermes` karena
423
+ site-packages read-only. Override dengan `SONNET_HERMES_HOME`.
424
+ Install `curl`/repo memakai `<project>/.hermes` supaya state nyambung
425
+ sama source.
426
+
427
+ ## Wizard provider (sekali, first run)
428
+
429
+ Pertama kali `sonnet` dijalankan, wizard ngecek Hermes lalu nanyain
430
+ provider:
431
+
432
+ ```
433
+ pilih provider
434
+ 1) Nous Portal - free tier, login browser
435
+ 2) DeepSeek - api.deepseek.com
436
+ 3) OpenRouter - openrouter.ai
437
+ 4) Anthropic - api.anthropic.com
438
+ 5) OpenAI - api.openai.com
439
+ 6) xAI - api.x.ai
440
+ 7) Custom OpenAI-compatible endpoint
441
+ ```
442
+
443
+ Keys disimpan di `~/.sonnet/config.json` dengan permission 600. Ada
444
+ kolom opsional buat Tavily (web search). Wizard di-skip kalo config
445
+ sudah ada, atau kalo ada flag (`-m`, `-p`, `--tavily`) atau env key
446
+ - biar oneshot non-interaktif nggak ketahan.
447
+
448
+ ## Welcome panel
449
+
450
+ Saat REPL buka, panel 2 kolom ala Claude Code:
451
+
452
+ ```
453
+ | sonnet v0.1.0 Tips buat mulai |
454
+ | /init bikin SONNET.md aturan project |
455
+ | stealth/space-bunny-alpha - nous /add-dir tambah folder lain |
456
+ | /home/user/proj/api /where lihat folder kerja agent |
457
+ | + /home/user/proj/shared @file.py sisipin isi file |
458
+ | 2 sesi - ketik /sessions !ls jalankan shell langsung |
459
+ | /model ganti model |
460
+ | Aktivitas terakhir |
461
+ | - benerin bug login |
462
+ ```
463
+
464
+ Kiri: versi, model, folder kerja, extra dir, jumlah sesi. Kanan:
465
+ tips + aktivitas terakhir. Matikan: `"welcome_panel": false` di config.
466
+
467
+ ## `/add-dir` - multi-root
468
+
469
+ Satu folder kerja default. Tambah folder lain yang boleh diakses
470
+ agent tanpa `cd`:
471
+
472
+ ```
473
+ /add-dir # lihat daftar
474
+ /add-dir ~/proj/shared # tambah
475
+ /add-dir --drop ~/proj/shared
476
+ ```
477
+
478
+ Extra dir dikirim ke agent sebagai `extra_dirs` di config YAML, bukan
479
+ dipindah jadi cwd - jadi agent tetap tahu folder mana yang primary.
480
+ Tersimpan di `~/.sonnet/config.json`, kepulih tiap buka REPL.
481
+
482
+ ## `/where` - cek folder kerja
483
+
484
+ ```bash
485
+ sonnet --where -C ~/proj/api
486
+ ```
487
+
488
+ ```
489
+ agent cwd : /home/kin/proj/api
490
+ d src
491
+ - README.md
492
+ model : stealth/space-bunny-alpha (nous)
493
+ ```
494
+
495
+ Dalam chat: `/where` (alias `/pwd`, `/dir`) nampilin path + isi folder
496
+ sekaligus. Pindah pakai `/cd <path>`.
497
+
498
+ **Akses**: sonnet jalan dengan `--yolo`, jadi **nggak ada prompt
499
+ approval**. Agent bisa baca/tulis folder mana pun yang user punya.
500
+ Batasnya cuma permission OS — user biasa nggak bisa baca file root.
501
+
502
+ ## Ringkasan hasil tool (ala Claude Code)
503
+
504
+ Di bawah `✓ ok 0.2s` sekarang ada ringkasan singkat hasil tool:
505
+
506
+ ```
507
+ ✓ read_file /tmp/x/a.py 0.1s ⎿ 42 lines
508
+ ✓ search_files *.py 0.1s ⎿ 3 matches
509
+ ✓ terminal python3 t.py 0.4s ⎿ 2 lines · halo dunia
510
+ ```
511
+
512
+ Ringkasan menyesuaikan tipe tool: jumlah baris (file), jumlah match
513
+ (search), atau jumlah baris + baris pertama (terminal).
514
+
515
+ ## Chat bar (ala Claude Code)
516
+
517
+ Input REPL bukan `input()` polos lagi. Yang ada:
518
+
519
+ - prompt `❯` + **ghost hint** redup (`ketik pesan · /help · !shell · @file · ? shortcut`) yang lenyap pas lo ketik
520
+ - **multiline**: `Ctrl+J` atau `\` + Enter = baris baru, Enter doang = kirim
521
+ - **`!cmd`** shell mode — jalanin command, output-nya masuk ke konteks agent
522
+ - **`@path`** file mention — isi file disisipin otomatis, agent ga perlu baca sendiri
523
+ - **`?`** di prompt kosong = panel shortcut
524
+ - **Ctrl+A/E/W/U/K/L** editing, **↑↓** history, **←→** kursor
525
+ - **Ctrl+C** pertama bersihkan baris, kedua keluar. **Ctrl+D** keluar kalo prompt kosong
526
+
527
+ Semua otomatis jatuh ke `input()` biasa kalo bukan tty (pipe, test).
528
+
529
+ ## Warna + diff (ala Claude Code)
530
+
531
+ Claude Code bedain dua hal secara visual, dan itu yang bikin chat panjang
532
+ tetap enak dibaca:
533
+
534
+ - **prompt user** = `❯` + teks **putih terang**
535
+ - **jawaban agent** = teks **redup**, jelas kelihatan lebih redup dari yang lo ketik
536
+
537
+ plus **diff inline** setiap agent ngedit file:
538
+
539
+ ```
540
+ ── /path/contoh.txt
541
+ +1 -1
542
+ baris dua
543
+ - baris tiga
544
+ + TIGA BARU
545
+ ```
546
+
547
+ - merah = baris yang dihapus, hijau = yang ditambahkan
548
+ - Maximum 24 baris per diff, sisanya `… (dipotong)`
549
+ - Berlaku buat: `write_file`, `str_replace`, `patch`, `multiedit`, `edit_file`
550
+ - Toggle: `/diff on|off` (default on), atau `--no-diff`
551
+
552
+ ### Syntax highlight code block
553
+
554
+ Claude Code mewarnain kode yang ditulis model. Sonnet sekarang begitu juga:
555
+
556
+ ```
557
+ ╭─ python
558
+ def fibonacci(n): ← keyword magenta
559
+ a, b = 0, 1 ← angka oranye
560
+ for _ in range(n): ← builtin cyan
561
+ hasil.append(a)
562
+ return hasil
563
+ ╰─
564
+ ```
565
+
566
+ - pakai **pygments**, palet nyambung sama warna sonnet
567
+ - **tanpa frame secara default** (`none`). Kalau agent ngedit file, kode
568
+ udah ditunjukin sama diff ijo/merah, jadi frame cuma ngeganda.
569
+ Opsional: `/frame bar` (garis vertikal tipis) atau `/frame box`
570
+ (`╭─` / `╰─` ala Claude Code)
571
+ - streaming aman: buffer per-baris, jadi fence ``` yang kepotong di
572
+ tengah chunk tetap kedeteksi
573
+ - fence yang belum ketutup (turn selesai duluan) tetap ditampilkan
574
+ - bahasa yang didukung: python, js/ts, bash, json, rust, go, sql, yaml, html,
575
+ c/cpp, ruby, php, dll — apa pun yang pygments kenal
576
+ - toggle: `/hl on|off` atau `--no-highlight`
577
+ - butuh `pygments` di `.venv`: `pip install pygments`
578
+
579
+ ### thinking interaktif
580
+
581
+ Thinking agent disembunyikan secara default, cuma muncul ringkasannya:
582
+
583
+ ```
584
+ ┌─ thinking (ctrl+t untuk expand)
585
+ └─ (824 chars disembunyikan, ctrl+t untuk lihat)
586
+ ```
587
+
588
+ - `/thinking on|off` buat nyalakan/mematikan permanen
589
+ - `--reasoning low|medium|high|off` atur effort
590
+
591
+ ### Gaya tampilan user
592
+
593
+ ```bash
594
+ sonnet # default: ❯ rata kiri
595
+ ```
596
+
597
+ | command | tampilan |
598
+ |---|---|
599
+ | `/style` | status sekarang |
600
+ | `/style claude` | `❯ teks` rata kiri, warna kontras (default) |
601
+ | `/style right` | bubble rata kanan dengan border, gaya Gemini/Cursor |
602
+ | `/style plain` | polos tanpa dekorasi |
603
+
604
+ ## Screenshot CLI
605
+
606
+ `tools/pty_capture.py` + `tools/pty_drive.py` jalanin sonnet di pty dan
607
+ tangkap output mentah; `tools/ansi2png.py` emulasikan terminal (grid 2D:
608
+ CR, ESC[nK, ESC[A/B gerak kursor, ESC[7m reverse video) lalu render ke
609
+ PNG. Dua jebakan yang bikin screenshot ngaco:
610
+
611
+ - file harus dibaca dengan `newline=""` — universal newlines menelan CR
612
+ jadi LF, jadi overwrite spinner kelihatan 3 baris padahal di terminal
613
+ cuma 1 baris hidup;
614
+ - `emulate()` balikin `(baris, mask_reverse)`, bukan cuma baris. Tanpa
615
+ mask, baris terpilih di picker kelihatan sama aja dengan yang lain.
616
+
617
+ ```bash
618
+ .venv/bin/python tools/pty_capture.py out.txt "./sonnet -p nous -m 'x'"
619
+ .venv/bin/python tools/ansi2png.py shot.png "judul" out.txt
620
+ .venv/bin/python tools/pty_drive.py out.txt 1.5 "./sonnet" "/help" "/model"
621
+ ```
622
+
623
+ ### Rate limit portal — itu PER MODEL, bukan per akun
624
+
625
+ Dari log `screen -r hermes`:
626
+ > You've reached **this model's** current fair-share rate limit. It adapts
627
+ > to demand — retry after the indicated delay, or try an alternate model.
628
+
629
+ Kredensial lo bisa sehat total sementara satu model kena 429. Header
630
+ `retry-after` nunjukin sisa waktu (teramati 1246-6511 detik, turun tiap
631
+ probe). hermes retry 3x, dan karena delaynya ribuan detik, request
632
+ kelihatan "hang" sampe 90 detik.
633
+
634
+ CLI punya dua lapis cek:
635
+
636
+ 1. `preflight()` — `hermes auth status` + `auth list` (kredensial sehat?)
637
+ 2. `probe_portal_model()` — 1 request mini ke model yg aktif. Ini yg
638
+ penting: auth check gak nyentuh rate limit per model.
639
+
640
+ Kalo kena, CLI lapor sisa cooldown + suggest model gratis lain yg
641
+ di-probe beneran hidup:
642
+ ```
643
+ auth: model stepfun/step-3.7-flash:free kena rate limit (429) — coba lagi dalam ~9m32s
644
+ model free lain yg lagi sehat: stealth/space-bunny-alpha
645
+ ```
646
+
647
+ ### Catatan config portal
648
+
649
+ - `base_url` & `api_key` dikosongin otomatis buat portal — hermes ambil
650
+ `inference_base_url` + `agent_key` sendiri dari `auth.json`.
651
+ - `config.yaml` di-rewrite tiap boot: blok `model:` diganti ke
652
+ `provider: nous` + model aktif, karena template Sonnet selalu nulis
653
+ `provider: deepseek` (kalau dibiarin, hermes pilih deepseek → 401).
654
+ - Event stream dari portal bertipe `text` (bukan `assistant`) — renderer
655
+ handle keduanya.
656
+ - `200 tapi jawaban kosong` (choices: []) diperlakukan gagal — model yg
657
+ gabisa jawab jangan disarankan.