개발 스킬

Use when you need to know where a piece of reporting actually came from — the user gives an article URL and asks "where does this come from?", "who is the original source?", "is this just a rewrite?", or another skill needs the provenance chain before grading or citing a report. Follows an article's links and named attributions back to the originating vendor, government, victim or actor document and returns the chain, the primary's stated access and confidence language, publication dates, and every hop it could not resolve. Deterministic — a script or the Liberty91 platform resolves the chain; the model does not reconstruct it from memory. Invoked by /quality-of-information-check, /threat-actor-profiling, /campaign-tracking and /intelligence-writing. Works on any URL with no API key.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Shodan API reference. Host reconnaissance, port scanning, and vulnerability data.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

AbuseIPDB API reference. IP reputation and abuse report lookups.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when a user asks to investigate, check, enrich, or characterize an IP address (IPv4 or IPv6). Chains VirusTotal, Shodan, AbuseIPDB, GreyNoise, OTX, and optionally Censys in parallel, then consolidates findings and prioritizes follow-up IOCs. Invoked by /cti-orchestrator when the target is an IP.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Censys API v2 reference. Host reconnaissance and certificate data.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when the user wants to configure API keys for the CTI skills pack, asks "how do I set up keys", "configure VirusTotal", "add my Shodan key", or runs /cti-setup. Walks through API key configuration inside Claude Code without needing to run a shell script. Also handles re-running setup, adding individual keys, and verifying that configured keys work.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

GreyNoise API reference. Internet scanner/noise classification for IPs.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

CrowdStrike Falcon Intelligence (Intel API) reference. OAuth2 auth, Falcon Query Language, indicator (IOC) lookups, threat-actor entities, intel reports, MITRE ATT&CK mappings, malware families, vulnerabilities, rule sets.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when a user asks to investigate, check, or characterize a domain or hostname. Chains VirusTotal, URLScan (search existing scans), Shodan (DNS resolve + host), OTX, ransomware.live (victim-status sweep), and optionally Censys. Returns reputation, resolution, hosting fingerprint, ransomware-claim status, and pivot candidates. Invoked by /cti-orchestrator when the target is a domain.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when a user asks to check, identify, or characterize a file hash (MD5, SHA-1, SHA-256). Chains VirusTotal and OTX, optionally triggers /malware-analysis for deeper behavioral review. Returns detection signals, malware family, behavioral tags, and pivot candidates (communicating IPs, dropped files). Invoked by /cti-orchestrator when the target is a hash.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when assessing the maturity of a CTI programme, the user asks "how mature is our CTI?" / "what should we improve next?", or wants a benchmark against the five-level model across six dimensions.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when you need to check an IP, domain, file hash, or URL against VirusTotal's reputation database. Returns detection ratio, verdict, community score, and key findings. Commonly invoked by investigation skills (/ip-investigation, /domain-investigation, /hash-investigation, /url-investigation) and by analysts enriching IOCs. Other agents/skills can chain this for VirusTotal enrichment.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when you need authoritative classification, threat-name, MITRE ATT&CK mapping, dynamic-analysis or sandbox results on a file hash, or when you need network threat intelligence for a URL/domain/IP from ReversingLabs Spectra Analyze (A1000). Returns verdict, risk score, AV detection ratio, threat name, behavioural tags, and pivot candidates (parent containers, extracted files, related samples by family). Commonly invoked by /hash-investigation and /malware-analysis. Other agents/skills can chain this for deeper malware enrichment beyond VirusTotal.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

指定スコープの instruction / agent / skill をコンテキスト最適化する。単一ファイルも複数ファイル群の MECE 横断レビューも扱う。構造レビューは review-workflow-structure の担当

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

現在または指定したGitHubリポジトリの新しいIssue、Pull Request、コメント、レビュー指摘をread-onlyで確認し、対応要否ごとに要約する。Use when: 新着Issue確認、新しいPR確認、コメント確認、レビュー返信確認、GitHub更新確認。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ディスク上の変更を作業単位でコミット（Pushなし）

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

リモートからPullして変更箇所を表示

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ディスク上の変更を作業単位でコミット＆プッシュ

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

差分、PR、選択範囲、指定ファイルを多角的にレビューし、既定は read-only、明示指示があれば critic review 後に修正と検証まで行う。日常コードレビューの入口で、`fix` 指定で Fix now / Guard now / Block に分けて最小修正・同根 Sweep・検証まで閉じる

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use GitHub repository issues and pull requests for Maestro task journeys, preserving Orchestra project identity, source routing, and exact PR linkage.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Inspect Orchestra projects and tasks, assign workers, queue planning, approve exact plans only on human instruction, request replanning with feedback, show stored PR linkages, reconcile receipts, and scope native agent/skill authoring. Orca-managed worktrees use the separate Orca CLI skill.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Investigate stuck runs and execution failures by tracing Symphony and Codex logs with issue/session identifiers; use when runs stall, retry repeatedly, or fail unexpectedly.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Pull latest origin/main into the current local branch and resolve merge conflicts (aka update-branch). Use when Codex needs to sync a feature branch with origin, perform a merge-based update (not rebase), and guide conflict resolution best practices.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Reset review context when bead polishing or code review has flatlined. Requires starting a brand-new Claude / Codex session. Use when you're seeing the same small edits round after round.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.