[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"workflow-asset-54722915":3,"seo:featured-workflow:54722915-4d55-11f1-9bc6-00163e2b0d79:fr":85,"workflow-related-asset-54722915-54722915-4d55-11f1-9bc6-00163e2b0d79":86},{"id":4,"uuid":5,"slug":6,"title":7,"description":8,"author_id":9,"author_name":10,"author_avatar":11,"token_estimate":12,"time_saved":12,"model_used":11,"fork_count":12,"vote_count":12,"view_count":13,"parent_id":12,"parent_uuid":11,"lang_type":14,"steps":15,"tags":22,"has_voted":28,"visibility":18,"share_token":11,"is_featured":12,"content_hash":29,"asset_kind":30,"target_tools":31,"install_mode":35,"entrypoint":19,"risk_profile":36,"dependencies":39,"verification":44,"agent_metadata":47,"agent_fit":59,"trust":71,"provenance":81,"created_at":83,"updated_at":84},3079,"54722915-4d55-11f1-9bc6-00163e2b0d79","asset-54722915","Sysdig — Deep System Visibility and Container Troubleshooting for Linux","Sysdig is an open-source system exploration tool that captures kernel-level events on Linux. It combines the power of strace, tcpdump, and top into a single CLI with container-native awareness.","8a910e34-3180-11f1-9bc6-00163e2b0d79","Script Depot","",0,2,"en",[16],{"id":17,"step_order":18,"title":19,"description":11,"prompt_template":20,"variables":11,"depends_on":21,"expected_output":11},3642,1,"Sysdig Overview","# Sysdig — Deep System Visibility and Container Troubleshooting for Linux\n\n## Quick Use\n```bash\n# Install on Debian\u002FUbuntu\ncurl -sS https:\u002F\u002Fdownload.sysdig.com\u002Fstable\u002Finstall-sysdig | sudo bash\n\n# Or run via Docker (privileged for kernel access)\ndocker run -i -t --privileged -v \u002Fvar\u002Frun\u002Fdocker.sock:\u002Fhost\u002Fvar\u002Frun\u002Fdocker.sock \n  -v \u002Fdev:\u002Fhost\u002Fdev -v \u002Fproc:\u002Fhost\u002Fproc:ro sysdig\u002Fsysdig\n\n# Capture all system calls\nsudo sysdig\n\n# Filter by container name\nsudo sysdig container.name=myapp\n```\n\n## Introduction\nSysdig is a system-level exploration and troubleshooting tool for Linux that captures system calls and OS events at the kernel level. It was built as a universal system visibility tool that understands containers natively, making it essential for debugging Docker and Kubernetes workloads.\n\n## What Sysdig Does\n- Captures every system call on a Linux host with low overhead\n- Filters events by process, user, file, network connection, or container\n- Provides csysdig, an ncurses-based interactive UI similar to htop\n- Saves captures to trace files for offline analysis and sharing\n- Includes chisels, scriptable Lua-based analysis modules for common tasks\n\n## Architecture Overview\nSysdig operates by loading a kernel module (or eBPF probe) that taps into the Linux kernel tracepoint infrastructure. Every system call is captured and enriched with container metadata from the Docker or CRI runtime. Events flow through a userspace library where filters and chisels process them. The architecture supports both live analysis and file-based replay.\n\n## Self-Hosting & Configuration\n- Install the kernel module via the official install script or package repositories\n- Use the eBPF probe as an alternative when kernel module loading is restricted\n- Run in Docker with `--privileged` and mounted host paths for full visibility\n- Configure output format with `-p` flags for custom event printing\n- Write custom chisels in Lua to automate specific analysis patterns\n\n## Key Features\n- Unified view of system calls, network traffic, and file I\u002FO in one tool\n- Native container and Kubernetes awareness without extra configuration\n- Trace file capture and replay for post-mortem debugging\n- Over 50 built-in chisels for common tasks like top processes by I\u002FO or network\n- Works alongside Falco for runtime security monitoring\n\n## Comparison with Similar Tools\n- **strace** — traces a single process but cannot capture system-wide events or container metadata\n- **tcpdump** — captures network packets but lacks system call and file I\u002FO visibility\n- **perf** — kernel profiler focused on CPU performance, not general system exploration\n- **bpftrace** — eBPF tracing with custom scripts but steeper learning curve\n- **htop\u002Fbtop** — real-time resource monitors without system call level detail\n\n## FAQ\n**Q: Does sysdig require a kernel module?**\nA: By default yes, but an eBPF probe is available as an alternative for environments where kernel modules cannot be loaded.\n\n**Q: Can I use sysdig in Kubernetes?**\nA: Yes. Deploy sysdig as a DaemonSet to capture events across all nodes with automatic pod and namespace tagging.\n\n**Q: What is the performance overhead?**\nA: Sysdig adds minimal overhead during normal operation. Heavy filtering at the kernel level keeps userspace processing efficient.\n\n**Q: How does sysdig relate to Falco?**\nA: Falco uses the same kernel instrumentation as sysdig but focuses on runtime security rules and alerting rather than interactive exploration.\n\n## Sources\n- https:\u002F\u002Fgithub.com\u002Fdraios\u002Fsysdig\n- https:\u002F\u002Fsysdig.com\u002Fopensource\u002F","0",[23],{"id":24,"name":25,"slug":26,"icon":27},11,"Scripts","script","📜",false,"3587e8b209258cae2b326fb0b6976157ed18d2071919118a0a4502ccb5b9608d","skill",[32,33,34],"claude_code","codex","gemini_cli","single",{"executes_code":28,"modifies_global_config":28,"requires_secrets":37,"uses_absolute_paths":38,"network_access":38},[],true,{"npm":40,"pip":41,"brew":42,"system":43},[],[],[],[],{"commands":45,"expected_files":46},[],[19],{"asset_kind":30,"target_tools":48,"install_mode":35,"entrypoint":19,"risk_profile":49,"dependencies":51,"content_hash":29,"verification":56,"inferred":38},[32,33,34],{"executes_code":28,"modifies_global_config":28,"requires_secrets":50,"uses_absolute_paths":38,"network_access":38},[],{"npm":52,"pip":53,"brew":54,"system":55},[],[],[],[],{"commands":57,"expected_files":58},[],[19],{"target":33,"score":60,"status":61,"policy":62,"why":63,"asset_kind":30,"install_mode":35},64,"needs_confirmation","confirm",[64,65,66,67,68,69,70],"target_tools includes codex","asset_kind skill","install_mode single","policy confirm","risk_profile.uses_absolute_paths is true","risk_profile.network_access is true","trust established",{"author_trust_level":72,"verified_publisher":28,"asset_signed_hash":29,"signature_status":73,"install_count":12,"report_count":12,"dangerous_capability_badges":74,"review_status":77,"signals":78},"established","hash_only",[75,76],"network_access","uses_absolute_paths","unreviewed",[79,80],"author has published assets","content hash available",{"owner_uuid":9,"owner_name":10,"source_url":82,"content_hash":29,"visibility":18,"created_at":83,"updated_at":84},"https:\u002F\u002Ftokrepo.com\u002Fen\u002Fworkflows\u002Fasset-54722915","2026-05-12 00:20:30","2026-05-12 04:35:49",null,[87,139,186,242],{"id":88,"uuid":89,"slug":90,"title":91,"description":92,"author_id":9,"author_name":10,"author_avatar":11,"token_estimate":12,"time_saved":12,"model_used":11,"fork_count":12,"vote_count":12,"view_count":93,"parent_id":12,"parent_uuid":11,"lang_type":14,"steps":94,"tags":95,"has_voted":28,"visibility":18,"share_token":11,"is_featured":12,"content_hash":97,"asset_kind":30,"target_tools":98,"install_mode":35,"entrypoint":99,"risk_profile":100,"dependencies":102,"verification":107,"agent_metadata":110,"agent_fit":122,"trust":124,"provenance":127,"created_at":129,"updated_at":130,"__relatedScore":131,"__relatedReasons":132,"__sharedTags":137},1153,"34a91e34-3701-11f1-9bc6-00163e2b0d79","pytorch-deep-learning-framework-research-production-34a91e34","PyTorch — The Deep Learning Framework for Research and Production","PyTorch is an open-source deep learning framework by Meta that provides tensor computation with GPU acceleration and automatic differentiation. Its dynamic computation graph and Pythonic API make it the dominant framework for AI research and increasingly for production.",63,[],[96],{"id":24,"name":25,"slug":26,"icon":27},"d6d068606a75c0f8a0a0298145987ff1e82a0686dc05ae899b00642380b903a2",[32,33,34],"SKILL.md",{"executes_code":28,"modifies_global_config":28,"requires_secrets":101,"uses_absolute_paths":38,"network_access":28},[],{"npm":103,"pip":104,"brew":105,"system":106},[],[],[],[],{"commands":108,"expected_files":109},[],[11],{"asset_kind":30,"target_tools":111,"install_mode":35,"entrypoint":99,"risk_profile":112,"dependencies":114,"content_hash":97,"verification":119},[32,33,34],{"executes_code":28,"modifies_global_config":28,"requires_secrets":113,"uses_absolute_paths":38,"network_access":28},[],{"npm":115,"pip":116,"brew":117,"system":118},[],[],[],[],{"commands":120,"expected_files":121},[],[11],{"target":33,"score":60,"status":61,"policy":62,"why":123,"asset_kind":30,"install_mode":35},[64,65,66,67,68,70],{"author_trust_level":72,"verified_publisher":28,"asset_signed_hash":97,"signature_status":73,"install_count":12,"report_count":12,"dangerous_capability_badges":125,"review_status":77,"signals":126},[76],[79,80],{"owner_uuid":9,"owner_name":10,"source_url":128,"content_hash":97,"visibility":18,"created_at":129,"updated_at":130},"https:\u002F\u002Ftokrepo.com\u002Fen\u002Fworkflows\u002Fpytorch-deep-learning-framework-research-production-34a91e34","2026-04-13 14:22:54","2026-05-12 01:49:56",91.70926996097583,[133,134,135,136],"topic-match","same-kind","same-target","same-author",[26,138],"scripts",{"id":140,"uuid":141,"slug":142,"title":143,"description":144,"author_id":9,"author_name":10,"author_avatar":11,"token_estimate":12,"time_saved":12,"model_used":11,"fork_count":12,"vote_count":12,"view_count":145,"parent_id":12,"parent_uuid":11,"lang_type":14,"steps":146,"tags":147,"has_voted":28,"visibility":18,"share_token":11,"is_featured":12,"content_hash":149,"asset_kind":30,"target_tools":150,"install_mode":35,"entrypoint":151,"risk_profile":152,"dependencies":154,"verification":159,"agent_metadata":162,"agent_fit":174,"trust":176,"provenance":179,"created_at":181,"updated_at":182,"__relatedScore":183,"__relatedReasons":184,"__sharedTags":185},1646,"fff69b5e-39da-11f1-9bc6-00163e2b0d79","casaos-simple-open-source-personal-cloud-system-fff69b5e","CasaOS — Simple Open-Source Personal Cloud System","CasaOS is a community-driven personal cloud system built around Docker. It provides a beautiful dashboard for one-click app installation, file management, and device monitoring on any hardware from a Raspberry Pi to a full server.",57,[],[148],{"id":24,"name":25,"slug":26,"icon":27},"16fa0393e4a1cc2be48d4c8e187bacd2f10bea9041cefe403d6e75dbecd406af",[32,33,34],"CasaOS Overview",{"executes_code":28,"modifies_global_config":28,"requires_secrets":153,"uses_absolute_paths":28,"network_access":38},[],{"npm":155,"pip":156,"brew":157,"system":158},[],[],[],[],{"commands":160,"expected_files":161},[],[151],{"asset_kind":30,"target_tools":163,"install_mode":35,"entrypoint":151,"risk_profile":164,"dependencies":166,"content_hash":149,"verification":171},[32,33,34],{"executes_code":28,"modifies_global_config":28,"requires_secrets":165,"uses_absolute_paths":28,"network_access":38},[],{"npm":167,"pip":168,"brew":169,"system":170},[],[],[],[],{"commands":172,"expected_files":173},[],[151],{"target":33,"score":60,"status":61,"policy":62,"why":175,"asset_kind":30,"install_mode":35},[64,65,66,67,69,70],{"author_trust_level":72,"verified_publisher":28,"asset_signed_hash":149,"signature_status":73,"install_count":12,"report_count":12,"dangerous_capability_badges":177,"review_status":77,"signals":178},[75],[79,80],{"owner_uuid":9,"owner_name":10,"source_url":180,"content_hash":149,"visibility":18,"created_at":181,"updated_at":182},"https:\u002F\u002Ftokrepo.com\u002Fen\u002Fworkflows\u002Fcasaos-simple-open-source-personal-cloud-system-fff69b5e","2026-04-17 05:26:58","2026-05-11 22:35:08",91.6451419903444,[133,134,135,136],[26,138],{"id":187,"uuid":188,"slug":189,"title":190,"description":191,"author_id":9,"author_name":10,"author_avatar":11,"token_estimate":192,"time_saved":12,"model_used":193,"fork_count":12,"vote_count":12,"view_count":194,"parent_id":12,"parent_uuid":11,"lang_type":14,"steps":195,"tags":196,"has_voted":28,"visibility":18,"share_token":11,"is_featured":12,"content_hash":198,"asset_kind":30,"target_tools":199,"install_mode":35,"entrypoint":190,"risk_profile":200,"dependencies":202,"verification":207,"agent_metadata":210,"agent_fit":222,"trust":230,"provenance":235,"created_at":237,"updated_at":238,"__relatedScore":239,"__relatedReasons":240,"__sharedTags":241},245,"7785d7a8-fc57-42ab-ba6b-4a970404fadc","ragflow-deep-document-understanding-rag-engine-7785d7a8","RAGFlow — Deep Document Understanding RAG Engine","Open-source RAG engine with deep document understanding. Parses complex PDFs, tables, images. Agent-powered Q&A with citations. Multi-model. 77K+ stars.",500,"Claude Code",179,[],[197],{"id":24,"name":25,"slug":26,"icon":27},"2aece3dd9a492b7ee5ee10ef3a9dd404109802c4a207774e13fb1ba4ac9b0417",[32,33,34],{"executes_code":28,"modifies_global_config":28,"requires_secrets":201,"uses_absolute_paths":28,"network_access":28},[],{"npm":203,"pip":204,"brew":205,"system":206},[],[],[],[],{"commands":208,"expected_files":209},[],[190],{"asset_kind":30,"target_tools":211,"install_mode":35,"entrypoint":190,"risk_profile":212,"dependencies":214,"content_hash":198,"verification":219},[32,33,34],{"executes_code":28,"modifies_global_config":28,"requires_secrets":213,"uses_absolute_paths":28,"network_access":28},[],{"npm":215,"pip":216,"brew":217,"system":218},[],[],[],[],{"commands":220,"expected_files":221},[],[190],{"target":33,"score":223,"status":224,"policy":225,"why":226,"asset_kind":30,"install_mode":35},98,"native","allow",[64,65,66,227,228,229,70],"markdown-only","policy allow","safe markdown-only Codex install",{"author_trust_level":72,"verified_publisher":28,"asset_signed_hash":198,"signature_status":73,"install_count":12,"report_count":12,"dangerous_capability_badges":231,"review_status":77,"signals":232},[],[233,79,80,234],"asset has usage views","no dangerous capability badges",{"owner_uuid":9,"owner_name":10,"source_url":236,"content_hash":198,"visibility":18,"created_at":237,"updated_at":238},"https:\u002F\u002Ftokrepo.com\u002Fen\u002Fworkflows\u002Fragflow-deep-document-understanding-rag-engine-7785d7a8","2026-03-31 17:17:51","2026-05-11 22:42:44",89.38290875765496,[133,134,135,136],[26,138],{"id":243,"uuid":244,"slug":245,"title":246,"description":247,"author_id":9,"author_name":10,"author_avatar":11,"token_estimate":12,"time_saved":12,"model_used":11,"fork_count":12,"vote_count":12,"view_count":248,"parent_id":12,"parent_uuid":11,"lang_type":14,"steps":249,"tags":250,"has_voted":28,"visibility":18,"share_token":11,"is_featured":12,"content_hash":252,"asset_kind":30,"target_tools":253,"install_mode":35,"entrypoint":254,"risk_profile":255,"dependencies":257,"verification":262,"agent_metadata":265,"agent_fit":277,"trust":279,"provenance":282,"created_at":284,"updated_at":285,"__relatedScore":286,"__relatedReasons":287,"__sharedTags":288},2018,"607b6fb1-3f30-11f1-9bc6-00163e2b0d79","osquery-sql-powered-operating-system-instrumentation-607b6fb1","osquery — SQL-Powered Operating System Instrumentation","osquery exposes your operating system as a relational database, letting you write SQL queries to explore OS data like running processes, loaded kernel modules, open network connections, and installed packages.",78,[],[251],{"id":24,"name":25,"slug":26,"icon":27},"a890ea91ad4c0d92348cce4b8f0d01f0eecc99f7370de706fb23ddda408d3b63",[32,33,34],"osquery Overview",{"executes_code":28,"modifies_global_config":28,"requires_secrets":256,"uses_absolute_paths":28,"network_access":28},[],{"npm":258,"pip":259,"brew":260,"system":261},[],[],[],[],{"commands":263,"expected_files":264},[],[254],{"asset_kind":30,"target_tools":266,"install_mode":35,"entrypoint":254,"risk_profile":267,"dependencies":269,"content_hash":252,"verification":274},[32,33,34],{"executes_code":28,"modifies_global_config":28,"requires_secrets":268,"uses_absolute_paths":28,"network_access":28},[],{"npm":270,"pip":271,"brew":272,"system":273},[],[],[],[],{"commands":275,"expected_files":276},[],[254],{"target":33,"score":223,"status":224,"policy":225,"why":278,"asset_kind":30,"install_mode":35},[64,65,66,227,228,229,70],{"author_trust_level":72,"verified_publisher":28,"asset_signed_hash":252,"signature_status":73,"install_count":12,"report_count":12,"dangerous_capability_badges":280,"review_status":77,"signals":281},[],[79,80,234],{"owner_uuid":9,"owner_name":10,"source_url":283,"content_hash":252,"visibility":18,"created_at":284,"updated_at":285},"https:\u002F\u002Ftokrepo.com\u002Fen\u002Fworkflows\u002Fosquery-sql-powered-operating-system-instrumentation-607b6fb1","2026-04-24 00:20:43","2026-05-11 19:03:35",88.84644063693567,[133,134,135,136],[26,138]]