mirror of
https://github.com/magnus919/agent-skills.git
synced 2026-09-21 08:36:33 +03:00
Magnus HedemarkGitHubfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>factory-droid[bot] <138933559+factory-droid@users.noreply.github.com>* docs: streamline cli and crowdsec skills Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> * chore(catalog): refresh generated projections Co-authored-by: factory-droid[bot] <138933559+factory-droid@users.noreply.github.com> --------- Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> Co-authored-by: factory-droid[bot] <138933559+factory-droid@users.noreply.github.com>
34 lines
1.5 KiB
Markdown
34 lines
1.5 KiB
Markdown
# CrowdSec — Open-Source Collaborative IPS/IDPS/WAF
|
|
|
|
Deploy, configure, and manage CrowdSec — the open-source security engine that detects and blocks malicious actors using behavior-based patterns and community blocklists.
|
|
|
|
## Why Install This Skill
|
|
|
|
When your agent loads this skill, it becomes a **CrowdSec security engineer** who can:
|
|
|
|
- **Install and configure** — Security Engine on Linux or Docker, remediation components
|
|
- **Manage with cscli** — hub collections, parsers, scenarios, and bouncers
|
|
- **Set up the AppSec WAF** — HTTP request inspection for web applications
|
|
- **Configure profiles and notifications** — tailored response and alerting
|
|
- **Monitor and troubleshoot** — metrics, alerts, decisions, and health checks
|
|
|
|
## What You Get
|
|
|
|
| Directory | Purpose |
|
|
|-----------|---------|
|
|
| `SKILL.md` | Safety-gated workflow for deployment, detection-to-blocking, cscli operations, AppSec, and troubleshooting |
|
|
| `references/` | Focused guides for configuration, cscli, AppSec WAF, Docker, bouncers, operations, databases, hardening, collections, and troubleshooting |
|
|
| `evals/` | Five representative deployment, triage, WAF, mutation-safety, and no-data cases |
|
|
|
|
## Quick Start
|
|
|
|
Start with the setup and first workflow in SKILL.md, then use the linked resources for the specific task you need to complete.
|
|
|
|
## Triggers
|
|
|
|
Load this when setting up or troubleshooting CrowdSec, or when you need an IPS/IDPS/WAF for your infrastructure.
|
|
|
|
## Requirements
|
|
|
|
Linux server for installation. Docker for containerized deployment. Standard shell tools.
|