soc-alert-pipeline
95 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
SOC 告警分析流水线 (L0 适配层) - 项目级 skill 提供腾讯安全产品 raw_log 的统一解析入口, 作为 L1 产品分析 (cwp-analyzer / yujie-analyzer) 和 L2 跨产品关联的共同底座。 适用场景: - 解析从 SOC 导出的 xlsx (含 OCSF 透出字段 + raw_log) - 把异构 raw_log (JSON / key=value / packet hex) 统一成结构化事件 - 跑批处理 / 单元测试 / 二次开发 不适用: - 单产品深度威胁分析 → 用 cwp-analyzer / yujie-analyzer - 跨产品关联 → 暂未实现 (等 L1 落地) - 在线 SOC API 实时拉取 → 当前仅支持 xlsx 离线导入
Partially scanned — some files couldn't be read; we'll retry on the next scan
What this skill can do
Runs commands on your computer
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'soc-alert-pipeline' ] || [ -L ~/.agents/skills/'soc-alert-pipeline' ]; then echo 'A skill folder named soc-alert-pipeline already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/infometa/workbuddyskills' "$d" && git -C "$d" checkout --quiet '33b6151ccee9aa0816c6f32d021be77d82772755' -- 'experts/soe/skills/soe/references/alert-analysis/soc-alert-pipeline' && mkdir -p ~/.agents/skills && cp -R "$d"/'experts/soe/skills/soe/references/alert-analysis/soc-alert-pipeline' ~/.agents/skills/'soc-alert-pipeline' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'soc-alert-pipeline' ~/.claude/skills/'soc-alert-pipeline' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/infometa/workbuddyskills/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-13 | 33b6151 | 95 |
| 2026-11-09 | 0749999 | 95 |
| 2026-11-07 | 1e18d8c | 100 |