Analyzes suspicious URLs using URLScan.io in isolated environments, capturing screenshots, DOM, HTTP requests, JS behavior, and extracting IOCs for phishing and malware investigation.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills-zh:analyzing-malicious-url-with-urlscanThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
URLScan.io 是一项用于扫描和分析可疑 URL 的免费服务,可在隔离环境中捕获网页的截图、DOM 内容、HTTP 事务、JavaScript 行为和网络连接。本 skill 涵盖使用 URLScan 的 Web 界面和 API 调查钓鱼(phishing)URL、凭据收割页面和恶意重定向,而无需将分析师的系统暴露于风险中。
URLScan.io 是一项用于扫描和分析可疑 URL 的免费服务,可在隔离环境中捕获网页的截图、DOM 内容、HTTP 事务、JavaScript 行为和网络连接。本 skill 涵盖使用 URLScan 的 Web 界面和 API 调查钓鱼(phishing)URL、凭据收割页面和恶意重定向,而无需将分析师的系统暴露于风险中。
Web:访问 https://urlscan.io 并提交可疑 URL
API:POST https://urlscan.io/api/v1/scan/
Header: API-Key: your-api-key
Body: {"url": "https://suspicious-url.com", "visibility": "private"}
使用 scripts/process.py 自动化 URL 扫描、提取 IOC,并与 VirusTotal、PhishTank 和 Google Safe Browsing 交叉比对。
npx claudepluginhub killvxk/cybersecurity-skills-zhScans and analyzes suspicious URLs using URLScan.io to investigate phishing, credential harvesting, and malicious redirects without exposing the analyst's system.
Scans and analyzes suspicious URLs using URLScan.io API and web interface to detect phishing, capture screenshots, DOM, HTTP transactions, and extract IOCs safely.
Analyzes suspicious URLs via URLScan.io web/API: screenshots, DOM, HTTP logs, JS behavior, network connections for safe phishing/threat investigations.