Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers. Uses the Canarytokens API and custom webhook integrations for breach detection. Use when building deception-based early warning systems for intrusion detection.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-honeytokens-for-breach-detectionnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-honeytokens-for-breach-detection -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-honeytokens-for-breach-detection -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-honeytokens-for-breach-detectiongh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-honeytokens-for-breach-detectiongit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-honeytokens-for-breach-detection ~/.claude/skills/implementing-honeytokens-for-breach-detection # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-honeytokens-for-breach-detection ~/.agents/skills/implementing-honeytokens-for-breach-detection # Codex, Cursor, Gemini CLI, Copilot, OpenCode