Execute cloud-native incident containment across AWS, Azure, and GCP using platform CLIs to revoke or disable compromised IAM credentials, isolate resources with security groups and network ACLs, and preserve forensic evidence via snapshots. Use when responding to a cloud security incident that requires stopping lateral movement while keeping evidence intact for later investigation.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-cloud-incident-containment-proceduresnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-cloud-incident-containment-procedures -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-cloud-incident-containment-procedures -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-cloud-incident-containment-proceduresgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-cloud-incident-containment-proceduresgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-cloud-incident-containment-procedures ~/.claude/skills/performing-cloud-incident-containment-procedures # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-cloud-incident-containment-procedures ~/.agents/skills/performing-cloud-incident-containment-procedures # Codex, Cursor, Gemini CLI, Copilot, OpenCode