Skill UI

This skill provides a highly rigorous framework for analyzing complex public issues, platform governance, and institutional compliance. It is designed to structure evidence boundaries, assess procedural justice, and track public commitments by synthesizing source ledgers and multiple data points. It is intended as a specialized sub-routine triggered by the main CrossFrame suite, not for standalone use. Key focus areas include source verification, identifying weak signals, and mitigating AI compliance performance risks.

This guide demonstrates how to use the pycti Python client to model complex cyber threat intelligence within the OpenCTI platform. It structures threat actors, intrusion sets, campaigns, and TTPs into a unified STIX 2.1 knowledge graph. The skill is essential for correlating fragmented data from multiple sources (IOCs, reports) into a comprehensive, queryable adversary picture, supporting advanced threat hunting and detection engineering.