crowdsec — 2 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-18

Run UTC: 2026-10-18T15:09:30Z
Reviewed: 2026-10-18
Published: 2026-10-18
Updated: 2026-10-18

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 2 skill declarations. Ran 59 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-18T15:09:30Z, tree bb5306e89c13b924e844eda101882431f203c58a535e89dc84e041c0ced2d24c.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: crowdsec — 2 skills
slug: source-skills-e2906a0bab25fe413d13c8fe
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 2 skill declarations. Ran 59 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): crowdsec; crowdsec-service-api"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/crowdsecurity/crowdsec-skill.git
documentation url: https://github.com/crowdsecurity/crowdsec-skill.git
commit: 8802dbe68a0552fe55dc605b6278f57e57578526
tree sha256: bb5306e89c13b924e844eda101882431f203c58a535e89dc84e041c0ced2d24c
file sha256: {".claude-plugin/marketplace.json":"680003f36d58540af463155c53d679373ef2203bfee039e64be3eec3b678dbc9",".claude-plugin/plugin.json":"4c3766438f8bc871bedc7dd6518f79c553a295a57c2f054c9c1a6e42d2885b9b",".github/ISSUE_TEMPLATE/bug_report.yml":"ab9aead03fbdd131bbbacc33952737385f1d796f64c7b125409b3c7dd0e7eb31",".github/ISSUE_TEMPLATE/config.yml":"ab0aacc81b12882b4a6d90c897e118bcaedc3dfb181573f5f0d08bab9cfede61",".github/ISSUE_TEMPLATE/feature_request.yml":"2d14f3d8ef26bf9f41c323dcc6d2ecfbb2c89f02774c04308c27b89e4c9930ea",".github/workflows/release.yml":"26f174030c2025776550ef3652fa63c1132bc551d79dbe74277094ab77500a94",".github/workflows/validate.yml":"1caa8680eb8fa4812ebdb73ad7b9e75ca2966b8a0b54c8dfe87f25dcfe170308","CHANGELOG.md":"7bdd9cb335decf41c1008d53ff087e8f78424931a363b808272fe6d1b7ef5ee4","CLAUDE.md":"15264e02658908642f9cf5654e7a34a605de3267f1d7dc38039ddeeab4eb3698","CONTRIBUTING.md":"927cd9c69a6ba6418173ef570a62143cd37b62546ebab14261abb4bd28cbbfff","LICENSE":"dc5b82a2f3313a2e54b49f4b481ce734ffd9f29008ce9129122a63fd0b343aa4","PRIVACY.md":"45fefeffa3347bebb2aea82689a83c2380e2e820d6932bcf8baa5906adc27c4b","README.md":"4b2ab217689944f8163768216317c56bc09023cb8a4d48571fd16dfb166ddd2e","skills/crowdsec-service-api/SKILL.md":"ff9c3031c62fd28151d9c95ec8978028624028cdf0ad4120bff075a58dfce09a","skills/crowdsec-service-api/references/allowlists.md":"318631f872d23c209d89087916f5689400844273186781d90c8d70f901fd989e","skills/crowdsec-service-api/references/authentication.md":"120f4ff44cba744d47fc415ac51b94de20ed7b9a83a765f4948f644ac08bd01e","skills/crowdsec-service-api/references/blocklists.md":"79a45b063053fe3d9d651d7b9c767f6dd910b56f777c7c4104991ebfd383e7f6","skills/crowdsec-service-api/references/decisions.md":"25dc94c6b2aba0cbf57a9ad73b58c0842b94ccd0d6a178e7972f6b424118a5c4","skills/crowdsec-service-api/references/integrations.md":"b5fae190f54f074b0234e3e725aa2d0fa42f632bdad8dae1edefc4be7cae0799","skills/crowdsec-service-api/references/metrics.md":"d78b181bed4f6fd95b32a652f496b4deb62dad7135c96ae93db09df558fbb1c9","skills/crowdsec/SKILL.md":"56095f49b5b8a2aff88459332e623ccc09c46a01adb7e0378f6d542d36ed5c12","skills/crowdsec/references/appsec/bot-detection/configure.md":"1e2dd02ebcfb16f51246602cb85e7947dcf1202005ee334ceedd278692f1ca8b","skills/crowdsec/references/appsec/bot-detection/customize.md":"128be60d8d94fbf13791601696116df97b3b2b9532c678bd59a11079c2f90881","skills/crowdsec/references/appsec/bot-detection/deploy.md":"8c79a2350eba1eaf132ab7c2abe3a2834f1c7f673c525e59e8d912887c8eac67","skills/crowdsec/references/appsec/bot-detection/overview.md":"a8dfe0fa620afe6e83fafc1bc2f948ba8d2b3dc8c2233f0fc10e74313ab94fe2","skills/crowdsec/references/appsec/bot-detection/troubleshoot.md":"46fc54d97bd4b1d7664954802ac919bc86646f1606c01d99b5914f9a3ec019f0","skills/crowdsec/references/appsec/configure.md":"75315072ce8240775cc51f8fbf91c879b9eab0960e51a29b881e605963644784","skills/crowdsec/references/appsec/deploy.md":"8513032802a2d8c3da7dcb7533acf11cf89de8af339eff7a994aa38fc27574d4","skills/crowdsec/references/appsec/overview.md":"9c482635c2fb435ab98f93e372151dc6fe16af48db02240f98df1e35aa6ba2ac","skills/crowdsec/references/appsec/troubleshoot.md":"d434dc3a8ac12b7a120f9357536847222d926d0bbc23ec7408f405159f956184","skills/crowdsec/references/configure/acquisition.md":"cf5840c6adeafc5a9e9b55c4b08455848887c09b2f66f73dd66db769edaa0996","skills/crowdsec/references/configure/allowlists.md":"3c7202301cbc639912a1ea05c640e756467ccacec2e5ba57328711fd66d0122a","skills/crowdsec/references/configure/bouncers/firewall.md":"c3ef9680d013640bacf3699949eb9a6f3ffc83051421470865725952f5fab7d8","skills/crowdsec/references/configure/bouncers/web-servers.md":"d13e2a15545087750efbc95ab3a40f75b059df80eba6ba2a1422ab65545c2535","skills/crowdsec/references/configure/hub.md":"7e8e4a723cec21bad374a7fa4d5c0621b3cabf0af7c1c08187a467ecc7e05af6","skills/crowdsec/references/configure/notifications.md":"f40b16e66c1097c9b9f6382650a4484f7cef04fd03da9ecf883a67637d794feb","skills/crowdsec/references/configure/profiles.md":"77a49d57d2690b040fd429f541a8141d56434b6f7c0c6ab12f1fa3ecbd5a1950","skills/crowdsec/references/debug/common/errors.md":"7a74b050fe109934d9bb4331ed52dba22c0eec9f57d482d51d3596bc5c17837f","skills/crowdsec/references/debug/common/platform-gotchas.md":"3334c9e5c643f241c1596c028088c05a02c4ac67e9b7a4e17f52b6e45c0961c3","skills/crowdsec/references/debug/common/triage.md":"16eb92ef13431fd92e799c1f7e56f7e5ad8d7f32eab34514c71feb6cd4940385","skills/crowdsec/references/debug/symptoms/no-alerts.md":"bec65a7bf329332da365f61c34de6b378cf4608f177746a39fb20816f3309a7e","skills/crowdsec/references/debug/symptoms/not-blocked.md":"74f3d20a58a3260310da6aded41c9ca7e576dea4bf986515ee5b7917b5323993","skills/crowdsec/references/debug/symptoms/parsing.md":"bcec55b28422902d96aecc50425164b07f694c0991b5d67b139dec369a7ff85b","skills/crowdsec/references/install/bare-metal.md":"6838f2b3ea5d57c8f2c6189184692aeecd496f55d484947e54a331adde525a9c","skills/crowdsec/references/install/console.md":"5dcfde2920094b61a5f9ce5dbe8c54eda8751695a3eb2f4fd43272f7c93541b6","skills/crowdsec/references/install/docker.md":"4f7ca5b68f5f01ec999fa5901b9103285a3c9789fa01447e44161472fbb67532","skills/crowdsec/references/install/kubernetes.md":"f49be5edf7c2e660781b5dd2e5fece7cde1a2c52a011f450536f9a315ad58319","skills/crowdsec/references/install/pfsense.md":"5db9cc04603a40996ef6afcd0af2c4e8b1e83d8312a6d9b56fb6540ff5aa22a9","skills/crowdsec/references/migrate/from-fail2ban.md":"f7a907ca70e91d5770e1fe4e0e86b8fd63799bb8983010c1dd4961c8874b9cca","skills/crowdsec/references/operate/health-check.md":"f16a9f0dc99509df8002e8c4b2f472f627077cd46fbf6d6f5ab2104c0bf74000","skills/crowdsec/references/operate/multi-server.md":"e7d8bf7aecc256bdd67595116d00fda80b3a85260cbb1e04f8088148b626bf35","skills/crowdsec/references/operate/upgrades.md":"f1bf33f33dfae05d1ce265a84f9780d4371fcfe0da89453d0d9317d817e0875f","skills/crowdsec/scripts/check-verification.py":"9a6c151ba958bf14408360bb2264fe87aa3775254d39c4f4e63d2c09cdd6be87","skills/crowdsec/scripts/diagnose.sh":"0ddca3e92dcf930722970d29b197af09b3980d97dfdf4e93b54fd45168bab0fc"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-18T15:09:30Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-18
reviewed date: 2026-10-18
published date: 2026-10-18
modified date: 2026-10-18
reviewer: Machine-checked
harness version: toolwitness harness at commit c086df0eda39d1552f8cab383c0b4a275ced82c4
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 59 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-18T15:09:30Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"crowdsec — 2 skills","operatingSystem":"Not exercised","softwareVersion":"8802dbe68a0552fe55dc605b6278f57e57578526"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 2 skill declarations. Ran 59 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): crowdsec; crowdsec-service-api"}],"evidence_sha256":{"LOCK.json":"f8a285a50f6eaa23b91d515f5007925195b35d3c06e626011bf13604144f0a6a","commands.json":"0f98d2515b88728ab03a74c4af921eb83f29f8ff2985e86bef8a894bd095595e","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"e95b378caf40766c5fb39aea1bfaf171f830004c30a3e1ce2cac542726c3e250","listing.json":"f7949c170ad4ff4e02e7984012942906b9a06c5a1382a412afefcc87253635e1","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"028a7bb3b8b72efc4345a60d16a7f91541ab62fab2165c26f919148966a63b8d","date":"2026-10-18","gates":"b32894ecfc563d84e7b0ce88b2302b089bf4f940638e6f670ba71fa72266e235","grok":"35b2d7de261325e0170329911fdeb5b70980be7ff436f6c3b459f022ba7d5ad4","kind":"machine-checked","reviewed_sha256":"2ba086c5610daddd47bcd6e4533ef37cc08c45c6c9f456db370e0db0de25f52c","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 59 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/crowdsec/SKILL.md",
        "name": "crowdsec",
        "description": "Use when the user is installing, configuring, operating, or debugging CrowdSec — including cscli, LAPI/CAPI, hub collections, parsers/scenarios/whitelists deployment, bouncers (firewall, nginx, traefik, caddy), WAF (AppSec component) deployment, bot detection / AppSec challenge mode (blocking headless browsers and scrapers, allowing verified crawlers), profiles, notifications, upgrades, and fail2ban migration. Covers bare-metal/systemd, Docker, Kubernetes/Helm, and CrowdSec Console enrollment. This is an operational skill — it does not author WAF rules, scenarios, or parsers.",
        "files": {
          "skills/crowdsec/SKILL.md": "56095f49b5b8a2aff88459332e623ccc09c46a01adb7e0378f6d542d36ed5c12",
          "skills/crowdsec/references/appsec/bot-detection/configure.md": "1e2dd02ebcfb16f51246602cb85e7947dcf1202005ee334ceedd278692f1ca8b",
          "skills/crowdsec/references/appsec/bot-detection/customize.md": "128be60d8d94fbf13791601696116df97b3b2b9532c678bd59a11079c2f90881",
          "skills/crowdsec/references/appsec/bot-detection/deploy.md": "8c79a2350eba1eaf132ab7c2abe3a2834f1c7f673c525e59e8d912887c8eac67",
          "skills/crowdsec/references/appsec/bot-detection/overview.md": "a8dfe0fa620afe6e83fafc1bc2f948ba8d2b3dc8c2233f0fc10e74313ab94fe2",
          "skills/crowdsec/references/appsec/bot-detection/troubleshoot.md": "46fc54d97bd4b1d7664954802ac919bc86646f1606c01d99b5914f9a3ec019f0",
          "skills/crowdsec/references/appsec/configure.md": "75315072ce8240775cc51f8fbf91c879b9eab0960e51a29b881e605963644784",
          "skills/crowdsec/references/appsec/deploy.md": "8513032802a2d8c3da7dcb7533acf11cf89de8af339eff7a994aa38fc27574d4",
          "skills/crowdsec/references/appsec/overview.md": "9c482635c2fb435ab98f93e372151dc6fe16af48db02240f98df1e35aa6ba2ac",
          "skills/crowdsec/references/appsec/troubleshoot.md": "

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-18