About

Imported from terminalskills/skills (skills/crowdsec/SKILL.md). Install upstream with npx skills add terminalskills/skills --skill crowdsec. Copyright stays with the author (Apache-2.0).

CrowdSec

Name: crowdsec
Author: terminalskills

Overview

CrowdSec is an open-source, community-driven security engine. It detects attacks (brute force, DDoS, scans) by analyzing logs and shares threat intelligence with the community. Think fail2ban but collaborative and modern.

Instructions

Step 1: Install

curl -s https://install.crowdsec.net | sudo bash
sudo apt install crowdsec crowdsec-firewall-bouncer-iptables

Step 2: Configure Collections

# Install detection scenarios
sudo cscli collections install crowdsecurity/nginx
sudo cscli collections install crowdsecurity/sshd
sudo cscli collections install crowdsecurity/linux
sudo cscli collections list

Step 3: Monitor

sudo cscli decisions list      # blocked IPs
sudo cscli alerts list         # alerts
sudo cscli metrics             # statistics

Step 4: Docker Deployment

# docker-compose.yml — CrowdSec with Nginx bouncer
services:
  crowdsec:
    image: crowdsecurity/crowdsec
    volumes:
      - /var/log/nginx:/var/log/nginx:ro
      - crowdsec_config:/etc/crowdsec
      - crowdsec_data:/var/lib/crowdsec/data
    environment:
      COLLECTIONS: "crowdsecurity/nginx crowdsecurity/http-cve"
  bouncer:
    image: crowdsecurity/nginx-bouncer
    environment:
      CROWDSEC_BOUNCER_API_KEY: your-api-key
volumes:
  crowdsec_config:
  crowdsec_data:

Guidelines

Free and open-source. Community shares 10M+ threat signals.
Bouncers enforce decisions — iptables, nginx, Cloudflare, AWS WAF.
Lower false positives than fail2ban due to community-validated intelligence.
Console (app.crowdsec.net) provides dashboard and threat visualization.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/terminalskills-skills-crowdsec/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

terminalskills-skills-crowdsec.ocm.jsonjson

{
  "ocm": "1",
  "id": "terminalskills-skills-crowdsec",
  "kind": "skill",
  "name": "crowdsec",
  "description": "Protect servers with CrowdSec collaborative security. Use when a user asks to block malicious IPs, detect brute force attacks, protect web servers, or set up a community-driven firewall and intrusion detection system.",
  "publisher": "terminalskills",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "crowdsec",
      "firewall",
      "ids",
      "brute-force",
      "community",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Protect servers with CrowdSec collaborative security. Use when a user asks to block malicious IPs, detect brute force attacks, protect web servers, or set up a community-driven firewall and intrusion detection system."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/terminalskills/skills",
      "path": "skills/crowdsec/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/terminalskills/skills/blob/HEAD/skills/crowdsec/SKILL.md",
      "key": "terminalskills/skills/skills/crowdsec/SKILL.md"
    },
    "compatibility": "Linux, Docker",
    "license": "Apache-2.0"
  },
  "instructions": "# CrowdSec\n\n## Overview\n\nCrowdSec is an open-source, community-driven security engine. It detects attacks (brute force, DDoS, scans) by analyzing logs and shares threat intelligence with the community. Think fail2ban but collaborative and modern.\n\n## Instructions\n\n### Step 1: Install\n\n```bash\ncurl -s https://install.crowdsec.net | sudo bash\nsudo apt install crowdsec crowdsec-firewall-bouncer-iptables\n```\n\n### Step 2: Configure Collections\n\n```bash\n# Install detection scenarios\nsudo cscli collections install crowdsecurity/nginx\nsudo cscli collections install crowdsecurity/sshd\nsudo cscli collec",
  "cost": {
    "context_tokens": 413
  }
}

Fetch it by URL: GET /api/v1/registry/terminalskills-skills-crowdsec/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.