situational-awareness
From the author
Assesses a freshly compromised host quietly before acting — who/where/what's here/what's watching/what's around — using local reads and living-off-the-land so the SOC never sees the recon. Use right after gaining a foothold, before privilege escalation or lateral movement, or when deciding whether an enumeration command is quiet enough to run.
Install
npx skills add zero-lab-ai/skills --skill situational-awareness -a claude-code
Installs to .claude/skills/situational-awareness/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 79
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- observermagnus919/agent-skillsMonitor a session passively to infer the user's workflow from what actually happened, staying dormant until a trigger phrase activates observation for workflow-architect.Planning★ 152
- security-alert-analysiselastic/agent-skillsInvestigate a specific Elastic Security detection alert: gather context, assess entity risk, classify the threat, document findings, and optionally acknowledge. Use when triaging a single known alert, performing SOC investigation, or following up after the security-alert-triage skill identifies a group to investigate.OfficialSecurity★ 602
- session-awarenessTibsfox/gsd-skill-creatorProject state awareness and session recovery for GSD-managed projects. Use this skill whenever: starting a new work session, resuming after a break, the user asks "where did we leave off" or "what's the current state", before making substantial code changes (to check for existing plans), the user seems disoriented about project status, or when something seems off and STATE.md might have relevant context. Also activates when the user references .planning/ files, milestones, phases, or project progress.Planning★ 71
- opsec-planningzero-lab-ai/skillsBuilds red-team OPSEC plans that connect an authorized objective to observable artifacts, detection risk, countermeasures, abort conditions, cleanup, and post-operation review. Use before a significant action or attack chain when stealth matters, when choosing between noisy and quiet approaches, or when an operator needs an auditable go/no-go decision.Planning★ 283
- read-the-roommohitagw15856/pm-claude-skillsFigure out the real social dynamics of a situation — the unspoken mood, who holds influence, what's actually going on beneath the surface — so you respond to what's real, not just what's said. Use when asked help me read this situation, what's really going on here, how should I play this socially, or I can't tell the vibe. Produces an interpretation of the likely dynamics from your description (the mood, the power/influence, the unspoken tensions, what people actually want), how to check your read, and how to adjust your approach — with a caution against over-reading and a nudge to verify rather than assume.Other★ 1.5K
- detection-and-monitoringcbrock84/headcountBuilds the capability to notice an attack in progress — deciding what to log and retain, centralizing it somewhere tamper-resistant, writing detections that fire on attacker behavior rather than on individual events, tuning out the noise that trains people to ignore alerts, and defining what happens when something fires. Use this to design or assess monitoring coverage, work out why an incident went unnoticed, cut alert volume without losing signal, or decide what a detection capability should cost.Design★ 2.2K
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in