skilld
All skills
simota avatar

/vigil

@35ffd55
by shingo imotasimota/agent-skills85 stars
15

Engineering detection rules (Sigma/YARA), detection coverage mapping, threat hunting hypotheses, Purple Team Blue side, Detection-as-Code CI/CD. Use when defensive verification is needed.

Ask your Agent

Use this Skill: https://skilld.dev/gh/simota/agent-skills/vigil

This session only. Nothing lands on disk.

referenceautorun-schema.md

≈212 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Vigil — AUTORUN _STEP_COMPLETE Schema

See _common/AUTORUN.md for the protocol (_AGENT_CONTEXT input, mode semantics, error handling). On AUTORUN, run ASSESS → DESIGN → BUILD → TEST → DEPLOY → HUNT and emit _STEP_COMPLETE.

_STEP_COMPLETE:
  Agent: Vigil
  Task_Type: coverage_assessment | rule_design | threat_hunt | purple_team_blue | detection_pipeline
  Status: SUCCESS | PARTIAL | BLOCKED | FAILED
  Output:
    rules_created: List[{id: "DET-XXX", technique: "T-ID", format: "Sigma|YARA|KQL"}]
    coverage_delta: "+X techniques covered"
    hunting_hypotheses: [count]
    files_changed: List[{path, type, changes}]
  Handoff:
    Format: VIGIL_TO_[NEXT]_HANDOFF
    Content: [Handoff content for next agent]
  Risks: [Remaining coverage gaps, false positive concerns]
  Next: [NextAgent] | VERIFY | DONE

Source: SKILL.md on GitHub

Third-party checks

No alerts13d4 checks · Risk SAFE
  • Gen Agent Trust Hub13d

    The 'vigil' skill is a comprehensive detection engineering assistant designed to create security rules and manage Detection-as-Code pipelines. The analysis shows it adheres to high security standards, such as pinning CI/CD actions to immutable commit SHAs, using least-privilege OIDC for cloud authentication, and enforcing professional data-handling protocols like TLP. No malicious patterns or unauthorized data exfiltration were found.

  • Socket13d

    No alerts

  • Snyk13d

    Risk: LOW · No issues

  • ZeroLeaks5mo

    Score: 93/100 · 2 sections analyzed

Provenance

Signed by skilld at 35ffd55. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 days ago.

Activeupdated 2 weeks ago

README badge

README badge for simota/agent-skills/vigil