← All skill packs

Security & Auditing Skills

Skill pack
5 skills0 selected
chrishuffman5Skills in this pack

Expert coverage of Arista EOS across all versions: Sysdb architecture, VXLAN/EVPN fabric design, MLAG, eAPI, CloudVision, AVD automation, spine-leaf BGP design, and DC fabric operations. Use for \"Arista EOS\", \"eAPI\", \"CloudVision\", \"MLAG\", \"AVD\", \"Arista VXLAN\", \"Arista BGP\", \"pyeapi\", \"Sysdb\", \"CloudVision Studios\". Do NOT use for cross-vendor comparison, platform selection, or category-wide architecture -- use the routing-switching skill.

English

Routing agent for all firewall and NGFW technologies. Provides cross-platform expertise in NGFW architecture, zone-based design, policy design, NAT, HA patterns, and platform selection. WHEN: \"firewall comparison\", \"NGFW selection\", \"firewall architecture\", \"zone design\", \"security policy\", \"firewall migration\", \"firewall HA\", \"rule ordering\".

English

Splunk Enterprise Security (ES), the premium SIEM app on top of Splunk: correlation searches, notable events, risk-based alerting (RBA), MITRE ATT&CK framework mapping, adaptive response actions, asset/identity correlation, threat intelligence framework, and ES content management. WHEN: \"Splunk ES\", \"Enterprise Security\", \"notable events\", \"risk-based alerting\", \"RBA\", \"correlation search\", \"adaptive response\", \"glass tables\", \"investigation workbench\", \"ES content update\". Do NOT use for core SPL/indexing/forwarder administration — that's the splunk skill (this plugin). Do NOT use for general log/metrics observability or ITSI — that's the splunk skill in the monitoring plugin.

English

Version-specific expert for Ceph Squid 19.2. Covers BlueStore LZ4 RocksDB compression, RBD diff-iterate local execution, CephFS crash-consistent snapshots, RGW IAM APIs, and Crimson/SeaStore tech preview. WHEN: \"Ceph Squid\", \"Ceph 19\", \"Squid 19.2\", \"Ceph Squid features\".

English

Expert agent for Suricata IDS/IPS/NSM. Covers rule writing, EVE JSON logging, AFPACKET/DPDK capture, protocol parsers, JA3/JA4 fingerprinting, file extraction, datasets, suricata-update, performance tuning, and IPS inline mode. WHEN: \"Suricata\", \"EVE JSON\", \"suricata rule\", \"suricata-update\", \"ET rules\", \"Emerging Threats\", \"JA3\", \"JA4\", \"AFPACKET\", \"Suricata IPS\", \"suricata.yaml\", \"threshold.config\".

English

Includes Arista Eos, Networking Firewall, Storage Ceph 19 2, and other workflows.

Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI

Supported by the Atlas install prompt. Skill-specific requirements vary.

Pack stats

Skills5CategorysecurityStars0

What’s included

Arista Eos

Expert coverage of Arista EOS across all versions: Sysdb architecture, VXLAN/EVPN fabric design, MLAG, eAPI, CloudVision, AVD automation, spine-leaf BGP design, and DC fabric operations. Use for \"Arista EOS\", \"eAPI\", \"CloudVision\", \"MLAG\", \"AVD\", \"Arista VXLAN\", \"Arista BGP\", \"pyeapi\", \"Sysdb\", \"CloudVision Studios\". Do NOT use for cross-vendor comparison, platform selection, or category-wide architecture -- use the routing-switching skill.

Networking Firewall

Routing agent for all firewall and NGFW technologies. Provides cross-platform expertise in NGFW architecture, zone-based design, policy design, NAT, HA patterns, and platform selection. WHEN: \"firewall comparison\", \"NGFW selection\", \"firewall architecture\", \"zone design\", \"security policy\", \"firewall migration\", \"firewall HA\", \"rule ordering\".

Splunk Es

Splunk Enterprise Security (ES), the premium SIEM app on top of Splunk: correlation searches, notable events, risk-based alerting (RBA), MITRE ATT&CK framework mapping, adaptive response actions, asset/identity correlation, threat intelligence framework, and ES content management. WHEN: \"Splunk ES\", \"Enterprise Security\", \"notable events\", \"risk-based alerting\", \"RBA\", \"correlation search\", \"adaptive response\", \"glass tables\", \"investigation workbench\", \"ES content update\". Do NOT use for core SPL/indexing/forwarder administration — that's the splunk skill (this plugin). Do NOT use for general log/metrics observability or ITSI — that's the splunk skill in the monitoring plugin.

Storage Ceph 19 2

Version-specific expert for Ceph Squid 19.2. Covers BlueStore LZ4 RocksDB compression, RBD diff-iterate local execution, CephFS crash-consistent snapshots, RGW IAM APIs, and Crimson/SeaStore tech preview. WHEN: \"Ceph Squid\", \"Ceph 19\", \"Squid 19.2\", \"Ceph Squid features\".

Suricata

Expert agent for Suricata IDS/IPS/NSM. Covers rule writing, EVE JSON logging, AFPACKET/DPDK capture, protocol parsers, JA3/JA4 fingerprinting, file extraction, datasets, suricata-update, performance tuning, and IPS inline mode. WHEN: \"Suricata\", \"EVE JSON\", \"suricata rule\", \"suricata-update\", \"ET rules\", \"Emerging Threats\", \"JA3\", \"JA4\", \"AFPACKET\", \"Suricata IPS\", \"suricata.yaml\", \"threshold.config\".

Quick start

  1. Choose your skills. Select individual skills above, or choose the entire pack.
  2. Copy the install prompt. Use Copy install prompt above the list.
  3. Send it to your agent. Paste into your coding agent’s chat. Your agent reviews the source and guides the setup.

Try it with your agent

After installation, start with a request like:

Example request
Use the Arista Eos skill to help with my task.
Ask me for the context you need before getting started.

Requirements & license

  • A coding agent that can access your project files and install skills.
  • Your agent checks each skill’s instructions, dependencies, and permissions during setup.
  • License details are not provided in these listings. Check the author’s terms before using the skills.
Security & Auditing Skills | Agent Skills Atlas