CloudHost/agent-skills
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

skill: add wazuh-soc-alert-triage

Browse Source 
Codex-evaluated agentic-soc-platform (github.com/FunnyWolf/agentic-soc-platform)
against this fleet's Wazuh deployment and informatiq-dashboard monitoring
integration. Adopted the reusable architecture only (evidence-preserving
normalization, deterministic correlation, approval-gated playbooks,
shadow-mode rollout) - not the platform itself. Rejected BagelHole/DevOps-
Security-Agent-Skills (163 skills, all duplicate/out-of-scope/unsafe) and
guillaumemeyer/watermarks-remover (narrow, no reusable technique beyond
existing c2patool/ExifTool).
This commit is contained in:
Malin
2026-08-22 14:14:17 +02:00
parent 0b5e0598c4
commit 8dd10ed81c
2 changed files with 192 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/wazuh-soc-alert-triage/agents/openai.yaml
+4
View File
@@ -0,0 +1,4 @@
interface:
display_name: "Wazuh SOC Alert Triage"
short_description: "Build guarded Wazuh alert-to-case automation"
default_prompt: "Use $wazuh-soc-alert-triage to design a safe alert-to-case triage workflow for this Wazuh fleet."