defense-detection-sigma
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of documentation, guidelines, and conceptual methods for creating SIEM-neutral detection rules. No executable scripts, automated tool wrappers, or system-altering configurations are provided.
- [SAFE]: The skill references established industry resources such as MITRE ATT&CK and the SigmaHQ project. The instructions follow defensive best practices for security operations.
Audit Metadata