io.github.gravitational/teleport/teleport-session-review · vmaster
Review and investigate Teleport session recordings. Use when the user asks to review or audit recorded sessions, find out what happened in a session, or search sessions by what occurred in them (e.g. "sessions that touched production databases", "who ran sudo on prod"). Covers common security workflows such as SOC risk triage of the riskiest sessions, periodic compliance reviews of production access, threat hunting for techniques (privilege escalation, persistence, data exfiltration, SSH config tampering, secret exposure), and incident-response pivots ("what did this user do on that host"). Also lists recent SSH/db/Kubernetes/desktop recordings, summarizes a session, and downloads or plays one back. Trigger on phrases like "review session recordings", "search session recordings", "what happened in session <id>", "find risky sessions", or any mention of Teleport session recordings or session summaries. Also trigger when following up on a session from a previous command.
teleport-session-review 是一个Agent Skill，收录自 SkillsMP。本页提供 Cursor、Claude Code 等客户端的安装配置片段。
Agent Skill 是带 SKILL.md 的指令包。安装后，AI 会根据 description 在匹配任务时自动加载，无需每次手动粘贴提示词。
选择你的平台查看安装方式
# 通用 CLI（Cursor / Claude Code / Codex 等均支持）
npx skills add gravitational/teleport@teleport-session-review安装完成后，在对话中直接描述你的任务（或提及技能名称）。Agent 会先读取 SKILL.md 的 description 判断是否启用，再按其中的步骤执行。可用 /skills（Claude Code）或在设置中查看已加载的 Skills。
vmain
io.github.millionco/react-doctor/react-doctor
Use when finishing a feature, fixing a bug, before committing React code, or when the user types `/doctor`, asks to scan, triage, or clean up React diagnostics. Covers lint, accessibility, bundle size, architecture. Includes a regression check and a full local-triage workflow that fetches the canonical playbook.
vmain
io.github.simstudioai/sim/emcn-design-review
Review UI code for alignment with the emcn design system — components, tokens, patterns, and conventions
vmain
io.github.mastra-ai/mastra/react-best-practices
React performance optimization guidelines from Mastra Engineering. This skill should be used when writing, reviewing, or refactoring React code to ensure optimal performance patterns. Triggers on tasks involving React components, data fetching, bundle optimization, or performance improvements.
vmain
io.github.sgl-project/sglang/cookbook-review-pr
Review a pull request against the SGLang Cookbook (docs_new/, Mintlify) contribution checklist — the config-driven format (per-model config + benchmarks JSX consumed by the shared _deployment.jsx / _playground.jsx engines). Run with /cookbook-review-pr <PR number>.
vmain
io.github.first-fluke/oh-my-agent/oma-mobile
Mobile specialist for Flutter, React Native, and Swift native iOS development. Use for mobile app, Flutter, Dart, React Native, Swift, SwiftUI, iOS, Android, Riverpod, swift-openapi-generator, and widget work.
vmain
io.github.first-fluke/oh-my-agent/oma-backend
Backend specialist for APIs, databases, authentication with clean architecture (Repository/Service/Router pattern). Use for API, endpoint, REST, database, server, migration, and auth work.
{
"id": "io.github.gravitational/teleport/teleport-session-review",
"type": "skill",
"version": "master",
"displayName": "teleport-session-review",
"description": "Review and investigate Teleport session recordings. Use when the user asks to review or audit recorded sessions, find out what happened in a session, or search sessions by what occurred in them (e.g. \"sessions that touched production databases\", \"who ran sudo on prod\"). Covers common security workflows such as SOC risk triage of the riskiest sessions, periodic compliance reviews of production access, threat hunting for techniques (privilege escalation, persistence, data exfiltration, SSH config tampering, secret exposure), and incident-response pivots (\"what did this user do on that host\"). Also lists recent SSH/db/Kubernetes/desktop recordings, summarizes a session, and downloads or plays one back. Trigger on phrases like \"review session recordings\", \"search session recordings\", \"what happened in session <id>\", \"find risky sessions\", or any mention of Teleport session recordings or session summaries. Also trigger when following up on a session from a previous command.",
"author": {
"name": "gravitational",
"url": "https://github.com/gravitational"
},
"repository": {
"url": "https://github.com/gravitational/teleport",
"source": "github",
"subfolder": "skills/teleport-session-review"
},
"homepage": "https://skillsmp.com/skills/gravitational-teleport-skills-teleport-session-review-skill-md",
"distribution": {
"packages": [
{
"registryType": "source",
"identifier": "gravitational/teleport@teleport-session-review",
"version": "master",
"runtimeHint": "npx skills add"
}
],
"remotes": []
},
"dependencies": [],
"installTargets": [
"claude-code",
"claude-desktop",
"cursor",
"codex",
"vscode"
],
"keywords": [
"stars:20469"
],
"provenance": {
"origin": "skillsmp",
"originalId": "gravitational-teleport-skills-teleport-session-review-skill-md",
"originalUrl": "https://skillsmp.com/skills/gravitational-teleport-skills-teleport-session-review-skill-md",
"isOfficial": false,
"status": "active"
}
}