Skill UI

Proactive threat hunting and detection engineering using Sigma/YARA rules, SIEM queries, and ATT&CK mapping for blue-team operations. Includes hypothesis-driven workflows, rule validation, and toolchain guidance.

This skill provides advanced guidelines for designing robust and effective tools specifically for autonomous AI agents. It shifts the focus from traditional developer APIs to contracts optimized for Language Models (LLMs). Key topics covered include treating tool descriptions as prompt engineering, implementing namespacing, applying the Consolidation Principle, and utilizing Architectural Reduction patterns (like file system access) to maximize agent reliability and workflow complexity.