threat-hunting
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is purely informational, providing a framework for security analysis and threat hunting.
- [SAFE]: All tool references (Sigma CLI, YARA, Splunk, osquery) are industry-standard and appropriate for the stated blue-team purpose.
- [SAFE]: Explicit safety warnings are included, such as the instruction to only perform detection validation in authorized laboratory environments.
- [NO_CODE]: The skill consists exclusively of documentation and instructional content with no executable scripts or automated logic.
Audit Metadata