detection-engineering
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of instructional documentation and procedural guidelines for security operations (SecOps). It provides a structured workflow for security analysts to convert hunting queries into production detection rules.
- [SAFE]: No executable scripts, binaries, or active code components are included in the skill. The content is limited to Markdown text and pseudo-code examples for filtering.
- [SAFE]: No network operations, external downloads, or sensitive file system access patterns were detected. All references are internal to other skill documentation files.
- [SAFE]: The workflow includes security best practices such as syntax validation, historical replay testing, and the use of conservative response actions to ensure the integrity of the generated detection rules.
Audit Metadata