Deploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie to detect unauthorized access, lateral movement, and attacker reconnaissance.
Automate repetitive workflows and reduce manual effort
Example: Generate reports, summarize documents, draft communications
Save 3-5 hours per week on routine tasks
Learn new skills, understand complex topics, get expert guidance
Example: Explain concepts, provide examples, suggest learning resources
Accelerate learning and skill development by 2x
Enhance output quality through reviews, suggestions, and refinements
Example: Review drafts, suggest improvements, catch errors
Improve work quality by 30-40% with less effort
Time estimate: 15-45 minutes depending on use case complexity
Prerequisites
Submit your Claude Code skill and start earning
epx add mukul975/Anthropic-Cybersecurity-Skills/implementing-network-deception-with-honeypotsCompatible with
Supported agents
| name | implementing-network-deception-with-honeypots |
| description | Deploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie to detect unauthorized access, lateral movement, and attacker reconnaissance. |
| domain | cybersecurity |
| subdomain | deception-technology |
| tags | - deception - honeypot - opencanary - cowrie - t-pot - detection - lateral-movement - network-security |
| version | '1.0' |
| author | mahipal |
| license | Apache-2.0 |
| nist_csf | - DE.CM-01 - DE.AE-06 - PR.IR-01 |
| Concept | Description |
|---|---|
| OpenCanary | Lightweight Python honeypot with modular service emulation |
| Cowrie | Medium-interaction SSH/Telnet honeypot capturing commands |
| T-Pot | Multi-honeypot platform with ELK stack visualization |
| Canary Token | Tripwire credential or file that alerts when accessed |
| Low-Interaction | Emulates services at protocol level without full OS |
| High-Interaction | Full OS honeypot capturing complete attacker sessions |
| Tool | Purpose |
|---|---|
| OpenCanary | Modular honeypot daemon with service emulation |
| Cowrie | SSH/Telnet honeypot with session recording |
| T-Pot | All-in-one multi-honeypot platform |
| Dionaea | Malware-capturing honeypot for exploit detection |
| Splunk/Elastic | SIEM for honeypot alert aggregation |
Alert: HONEYPOT-[SERVICE]-[DATE]-[SEQ]
Honeypot: [Hostname/IP]
Service: [SSH/HTTP/SMB/FTP/RDP]
Source IP: [Attacker IP]
Interaction: [Login attempt/Port scan/File access]
Credentials Used: [Username:Password if applicable]
Commands Executed: [For SSH honeypots]
Risk Level: [Critical/High/Medium/Low]
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versionimplementing-network-deception-with-honeypotsExecute the skills CLI command in your project's root directory to begin installation:
epx add mukul975/Anthropic-Cybersecurity-Skills/implementing-network-deception-with-honeypotsFetches implementing-network-deception-with-honeypots from mukul975/Anthropic-Cybersecurity-Skills and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/implementing-network-deception-with-honeypots
Restart Cursor to activate implementing-network-deception-with-honeypots. Access via /implementing-network-deception-with-honeypotsin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.
✗ Avoid when
Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.
hunting-credential-stuffing-attacks
mukul975/Anthropic-Cybersecurity-Skills · hunting-credential-stuffing-attacks · same repo
scanning-container-images-with-grype
mukul975/Anthropic-Cybersecurity-Skills · scanning-container-images-with-grype · same repo
implementing-end-to-end-encryption-for-messaging
mukul975/Anthropic-Cybersecurity-Skills · implementing-end-to-end-encryption-for-messaging · same repo
conducting-mobile-app-penetration-test
mukul975/Anthropic-Cybersecurity-Skills · conducting-mobile-app-penetration-test · same repo
implementing-iso-27001-information-security-management
mukul975/Anthropic-Cybersecurity-Skills · implementing-iso-27001-information-security-management · same repo
implementing-hardware-security-key-authentication
mukul975/Anthropic-Cybersecurity-Skills · implementing-hardware-security-key-authentication · same repo
implementing-network-deception-with-honeypots has been reliable in day-to-day use. Documentation quality is above average for community skills.
implementing-network-deception-with-honeypots reduced setup friction for our internal harness; good balance of opinion and flexibility.
implementing-network-deception-with-honeypots is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
Solid pick for teams standardizing on skills: implementing-network-deception-with-honeypots is focused, and the summary matches what you get after install.
Keeps context tight: implementing-network-deception-with-honeypots is the kind of skill you can hand to a new teammate without a long onboarding doc.
implementing-network-deception-with-honeypots is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
implementing-network-deception-with-honeypots has been reliable in day-to-day use. Documentation quality is above average for community skills.
Keeps context tight: implementing-network-deception-with-honeypots is the kind of skill you can hand to a new teammate without a long onboarding doc.
I recommend implementing-network-deception-with-honeypots for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.
We added implementing-network-deception-with-honeypots from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
showing 1-10 of 72