Monitoring

The security-scan skill audits your Claude Code .claude/ configuration for secrets, risky MCP setup, injection-prone instructions, dangerous bypass flags, and weak agent or hook definitions using AgentShield. Use it for repeatable security checks before committing or onboarding.

canary-watch is a post-deploy monitoring skill for checking a live URL for regressions after releases, merges, or dependency updates across staging or production.

canary is a post-deploy monitoring skill that watches live apps for console errors, page failures, and performance regressions. It compares current behavior against a pre-deploy baseline so you can verify a release, catch broken pages, and spot visible anomalies with less guesswork than a generic prompt.

uptimerobot-automation helps AI agents run UptimeRobot Monitoring workflows through Composio Rube MCP. Use it to install the skill, connect Rube MCP, verify the UptimeRobot connection, discover current tool schemas with RUBE_SEARCH_TOOLS, and execute monitor tasks safely.

updown-io-automation helps agents run Updown.io monitoring tasks through Composio Rube MCP. Learn setup requirements, RUBE_SEARCH_TOOLS discovery, connection checks, and safe usage patterns.

statuscake-automation helps agents automate Statuscake Monitoring tasks through Composio Rube MCP. Use it to discover live tool schemas, verify the Statuscake connection, and run safer uptime, SSL, domain, page speed, or incident workflows.

sslmate-cert-spotter-api-automation is a Claude skill for SSLMate Cert Spotter API monitoring via Composio Rube MCP. Use it to discover live tool schemas, verify the sslmate_cert_spotter_api connection, and run certificate transparency workflows safely.

pingdom-automation helps agents automate Pingdom monitoring tasks through Composio Rube MCP. Learn setup, connection checks, tool discovery with RUBE_SEARCH_TOOLS, and safe usage patterns.

honeybadger-automation helps agents automate Honeybadger monitoring tasks through Composio Rube MCP. Use it to discover current tool schemas, verify an active Honeybadger connection, and run read-only or approved workflows with less guesswork.

globalping-automation helps agents run Globalping monitoring and network diagnostics through Composio Rube MCP, with tool discovery before execution to use current schemas.

fluxguard-automation helps agents run Fluxguard workflows through Composio Rube MCP by discovering current tool schemas first, checking the active Fluxguard connection, and planning safer execution.

python-observability helps you instrument Python services with structured logging, metrics, traces, correlation IDs, and bounded-cardinality patterns for production debugging and safer observability rollouts.

grafana-dashboards helps agents design production Grafana dashboards for observability. Use it to plan RED and USE-based layouts, choose panel hierarchy, and draft dashboard structure for Prometheus-style metrics.

prometheus-configuration helps you install and use Prometheus for scraping, retention, alerting, and recording rules across Kubernetes, Docker Compose, and server setups.

Use the slo-implementation skill to define SLIs, SLOs, error budgets, and burn-rate alerts for Reliability work. It helps teams turn service goals into measurable targets with PromQL-style examples and practical guidance from SKILL.md.

Use the distributed-tracing skill to design and explain request tracing across microservices with Jaeger and Tempo. Covers install basics, trace and span concepts, Kubernetes setup patterns, context propagation, and practical usage for observability and latency debugging.

appinsights-instrumentation helps instrument Azure-hosted web apps with Application Insights. It guides App Service auto-instrumentation or manual ASP.NET Core and Node.js setup, including connection string and IaC updates.

observability-designer helps SRE and platform teams design observability for APIs and services with dashboard generation, alert-noise analysis, and lightweight SLI/SLO scaffolds using included Python scripts, samples, and references.

detecting-shadow-it-cloud-usage helps identify unauthorized SaaS and cloud usage from proxy logs, DNS queries, and netflow. It classifies domains, compares them with approved lists, and supports security audit workflows with structured evidence from the detecting-shadow-it-cloud-usage skill guide.

detecting-rdp-brute-force-attacks helps analyze Windows Security Event Logs for RDP brute force patterns, including repeated 4625 failures, 4624 success after failures, NLA-related logons, and source-IP concentration. Use it for Security Audit, threat hunting, and repeatable EVTX-based investigations.

The detecting-network-anomalies-with-zeek skill helps deploy Zeek for passive network monitoring, review structured logs, and build custom detections for beaconing, DNS tunneling, and unusual protocol activity. It is suited for threat hunting, incident response, SIEM-ready network metadata, and Security Audit workflows—not inline prevention.

detecting-beaconing-patterns-with-zeek helps analyze Zeek conn.log intervals to detect C2-style beaconing. It uses ZAT, groups flows by source, destination, and port, and scores low-jitter patterns with statistical checks. Ideal for SOC, threat hunting, incident response, and detecting-beaconing-patterns-with-zeek for Security Audit workflows.

configuring-host-based-intrusion-detection guide for setting up HIDS with Wazuh, OSSEC, or AIDE to monitor file integrity, system changes, and compliance-focused endpoint security for Security Audit workflows.

analyzing-azure-activity-logs-for-threats skill for querying Azure Monitor activity logs and sign-in logs to spot suspicious admin actions, impossible travel, privilege escalation, and resource tampering. Built for incident triage with KQL patterns, an execution path, and practical Azure log table guidance.