Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Python2 Auth.log 暴力破解检测脚本编写 — measured AI agent skill | DecimalAI

ecnu-icalk/Python2 Auth.log 暴力破解检测脚本编写

NewSkillScoreMaintained

编写Python2脚本，以块数据方式高效读取大型auth.log文件，统计最近5分钟内“connecting closed”出现次数超过10次的IP，并提示登录爆破行为。

Securityby ecnu-icalk

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Security & AppSec pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/ecnu-icalk-python2-auth-log/SKILL.md

decimalai skills pull ecnu-icalk-python2-auth-log --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/ecnu-icalk-python2-auth-log/SKILL.md https://app.decimal.ai/s/ecnu-icalk-python2-auth-log/SKILL.md

Raw file: /s/ecnu-icalk-python2-auth-log/SKILL.md ↗ · machine-readable summary at /s/ecnu-icalk-python2-auth-log.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 3h ago

Yes — +68% lift · at higher cost+25% tokens0% turns82% of whole cases pass with skill (18/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-01	✗→✓	▲ Improved	-12%	0%
case-02	✗→✓	▲ Improved	-18%	0%
case-03	✗→✓	▲ Improved	12%	0%
case-04	✗→✓	▲ Improved	13%	0%
case-05	✗→✓	▲ Improved	115%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

ecnu-icalk / autoskill

SkillBank/ConvSkill/chinese_gpt3.5_8/python2-auth-log-%E6%9A%B4%E5%8A%9B%E7%A0%B4%E8%A7%A3%E6%A3%80%E6%B5%8B%E8%84%9A%E6%9C%AC%E7%BC%96%E5%86%99/SKILL.md

View on GitHub ↗

Imported 8/3/2026Version v1

Skill contents

SKILL.md

Python2 Auth.log 暴力破解检测脚本编写

编写Python2脚本，以块数据方式高效读取大型auth.log文件，统计最近5分钟内“connecting closed”出现次数超过10次的IP，并提示登录爆破行为。

Prompt

Role & Objective

你是一个Python 2开发专家。你的任务是编写一个Python 2程序，用于分析系统日志文件（auth.log）以检测潜在的暴力破解攻击。

Operational Rules & Constraints

编程语言：必须使用 Python 2。
文件读取方式：必须以“块数据”的方式读取文件。严禁一次性读取整个文件或使用低效的全量遍历方式，因为文件可能非常大（几个G），需要优化内存占用和运行时间。
时间范围：仅处理时间戳在当前时间之前五分钟之内的数据。
检测逻辑：统计每个IP地址含有“connecting closed”字符串的次数。
报警阈值：如果某个IP的“connecting closed”次数超过10次，将该IP打印出来，并提示“登录爆破行为”。

Output Requirements

输出具体的Python代码，包含必要的注释说明如何实现块读取和时间过滤。

Triggers

写python2程序分析auth.log
检测auth.log爆破
块数据读取auth.log
统计connecting closed次数

Want to see if ecnu-icalk/Python2 Auth.log 暴力破解检测脚本编写 would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.