The Agent Skills Directory

[SAFE]: The skill provides legitimate defensive tools and documentation intended for blue-team security operations. The core logic in scripts/threat_signal_analyzer.py is transparent and focuses on calculating threat scores and statistical anomalies based on MITRE ATT&CK mappings.- [SAFE]: The scripts/threat_signal_analyzer.py tool uses only Python standard libraries (argparse, json, re, sys, datetime) and does not perform any network operations, dynamic code execution, or unauthorized file system access.- [SAFE]: The reference material in references/hunt-playbooks.md contains common 'Living off the Land' (LOLBin) strings and command patterns. These are documented for detection purposes and are enclosed in markdown code blocks, preventing any accidental execution.- [SAFE]: The workflows and example commands follow standard CLI security practices, such as using JSON for structured input/output and checking exit codes for automation.

threat-detection