60 skills. 隔离沙箱。开箱即用。

每个 skill 都在隔离沙箱中运行,经过加密签名,并具备资源计量。连接器、富化和安全工具。

DockerDocker
CloudflareCloudflare
PostgreSQLPostgreSQL
OWASPOWASP
FortinetFortinet
VirusTotalVirusTotal
TrivyTrivy
Pi-holePi-hole
ProxmoxProxmox
UbiquitiUbiquiti
pfSensepfSense
OPNsenseOPNsense
GrafanaGrafana
RustRust
PythonPython
Next.jsNext.js
ElasticsearchElasticsearch
LinuxLinux
DebianDebian
NginxNginx
RedisRedis
STIX 2.1STIX 2.1
KubernetesKubernetes
GitHubGitHub
DockerDocker
CloudflareCloudflare
PostgreSQLPostgreSQL
OWASPOWASP
FortinetFortinet
VirusTotalVirusTotal
TrivyTrivy
Pi-holePi-hole
ProxmoxProxmox
UbiquitiUbiquiti
pfSensepfSense
OPNsenseOPNsense
GrafanaGrafana
RustRust
PythonPython
Next.jsNext.js
ElasticsearchElasticsearch
LinuxLinux
DebianDebian
NginxNginx
RedisRedis
STIX 2.1STIX 2.1
KubernetesKubernetes
GitHubGitHub

Discovery

(8)
C
Active Directory
CONNECTOR
C
Fortinet FortiGate
CONNECTOR
C
GLPI CMDB
CONNECTOR
C
Proxmox VE
CONNECTOR
C
UniFi Controller
CONNECTOR
C
Zeek Network Monitor
CONNECTOR
C
pfSense / OPNsense
CONNECTOR
T
Nmap Network Discovery
TOOL

Web Security

(12)
C
Cloudflare WAF
CONNECTOR
C
Pi-hole DNS
CONNECTOR
C
UptimeRobot
CONNECTOR
E
Certificate Transparency (crt.sh)
ENRICHMENT
E
Google Safe Browsing
ENRICHMENT
E
Mozilla Observatory
ENRICHMENT
E
PhishTank
ENRICHMENT
E
SSL Labs Audit
ENRICHMENT
E
SecurityTrails DNS Intelligence
ENRICHMENT
E
URLScan.io
ENRICHMENT
E
WPScan Vulnerabilities
ENRICHMENT
E
Wordfence Intelligence
ENRICHMENT

IDS / IPS

(2)
C
CrowdSec LAPI
CONNECTOR
C
Suricata IDS
CONNECTOR

合规

(7)
C
DefectDojo
CONNECTOR
T
Active Directory Audit
TOOL
T
Audit Cloud
TOOL
T
Audit Email
TOOL
T
Conformité ISO 27001
TOOL
T
Conformité NIS2
TOOL
T
Lynis Hardening Audit
TOOL

监控

(2)
C
Wazuh SIEM
CONNECTOR
T
Dark Web Monitor
TOOL

Threat Intel

(4)
E
AbuseIPDB
ENRICHMENT
E
CrowdSec CTI
ENRICHMENT
E
GreyNoise
ENRICHMENT
E
Spamhaus Blacklist
ENRICHMENT

扫描

(5)
E
Surface Shodan
ENRICHMENT
E
VirusTotal
ENRICHMENT
T
漏洞扫描器
TOOL
T
Subfinder
TOOL
T
httpx
TOOL

AppSec

(4)
T
Checkov IaC Scanner
TOOL
T
OWASP ZAP
TOOL
T
Semgrep SAST
TOOL
T
TruffleHog Secrets Scanner
TOOL

容器

(4)
T
Docker Bench Security
TOOL
T
Grype Vulnerability Scanner
TOOL
T
Syft SBOM Generator
TOOL
T
Trivy Container Scanner
TOOL

报告

(1)
T
安全报告
TOOL

Catalog (内置)

(11)
C
集成 syslog 收集器
CONNECTOR
C
Freebox
CONNECTOR
E
CERT-FR
ENRICHMENT
E
CISA KEV
ENRICHMENT
E
EPSS
ENRICHMENT
E
MITRE ATT&CK
ENRICHMENT
E
NVD NIST
ENRICHMENT
E
OpenPhish
ENRICHMENT
T
Graph Intelligence STIX 2.1
TOOL
T
Intelligence Engine
TOOL
T
Sigma Rules
TOOL

社区 Skills

官方 skills 采用 Rust 编写,运行于隔离沙箱中以实现最高安全性。社区 skills 将采用 Python 编写,运行于隔离的 Docker 容器中,更易于开发,且具备相同的隔离级别。