Deploy, configure, and manage CrowdSec — the open-source security engine that detects and blocks malicious actors using behavior-based patterns and community blocklists.

Why Install This Skill

When your agent loads this skill, it becomes a CrowdSec security engineer who can:

Install and configure — Security Engine on Linux or Docker, remediation components
Manage with cscli — hub collections, parsers, scenarios, and bouncers
Set up the AppSec WAF — HTTP request inspection for web applications
Configure profiles and notifications — tailored response and alerting
Monitor and troubleshoot — metrics, alerts, decisions, and health checks

What You Get

Directory	Purpose
`SKILL.md`	Architecture overview, installation guide, quick reference
`references/`	7 reference files: config deep dive, AppSec WAF, Docker deployment, Traefik integration, database backends, hub collections, troubleshooting

Triggers

Load this when setting up or troubleshooting CrowdSec, or when you need an IPS/IDPS/WAF for your infrastructure.

Requirements

Linux server for installation. Docker for containerized deployment. Standard shell tools.