메뉴
This skill should be used when generating intelligence card markdown, creating daily/weekly/monthly reports, formatting agent JSON output, or the user asks to "create an intelligence card", "generate report template", "format report output".
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
This skill should be used when generating theme reports and panorama reports from analysis materials. Provides markdown templates and structure guidance.
This skill should be used when the user wants to interact with Obsidian from Claude Code. Triggers when the user asks to "search obsidian", "query bases", "read note properties", "set note properties", "create notes in obsidian", or work with Obsidian-specific files like .base files.
This skill should be used when extracting strategic intelligence from documents, determining what information has strategic value, and applying quality standards for intelligence extraction. Triggers on "extract intelligence", "analyze document", "strategic value", or when evaluating information significance.
This skill should be used when analyzing cybersecurity-related documents for strategic intelligence extraction. Triggers when processing documents about threat intelligence, vendor analysis, emerging security technologies, market trends, policy regulations, or capital investment in the security industry.
This skill should be used when the intelligence-cluster agent needs guidance on clustering intelligence cards to themes, detecting new themes, and determining card-theme assignments.
This skill should be used when the theme-analyzer agent needs guidance on analyzing intelligence cards within a theme, identifying trends, and generating analysis materials.
| name | intelligence-output-templates |
| description | This skill should be used when generating intelligence card markdown, creating daily/weekly/monthly reports, formatting agent JSON output, or the user asks to "create an intelligence card", "generate report template", "format report output". |
此 skill 提供情报卡片和情报报告的输出模板。
情报卡片 frontmatter 采用四组层次结构：
intelligence_id, title, created_date, primary_domain, secondary_domains, security_relevance, tagsitem_id, item_title, author, original_url, published_at, fetched_at, completeness_score, archived_file, converted_file, converted_content_hashsource_id, source_name, source_url, source_tier, source_scorereview_status, generated_bytags 字段使用 Obsidian 嵌套标签格式（斜杠分隔）：
tags: ["geo/china", "business/MSSP", "APT", "ransomware"]
geo/ 前缀：地域范围（geo/global, geo/china, geo/unknown 等）business/ 前缀：业务模式（仅 Industry-Analysis）Obsidian 规范：嵌套标签使用
/分隔，如#geo/china，冒号:不是有效字符。
情报卡片按领域和年月存储：
{output_dir}/
├── Threat-Landscape/
│ └── 2026/
│ ├── 03/
│ │ └── 20260301-apt-activity.md
│ └── 04/
│ └── 20260402-ransomware-trend.md
├── Industry-Analysis/
│ └── 2025/
│ └── 10/
│ └── 20251013-cybersecurity-trends-2026.md
├── Vendor-Intelligence/
│ └── 2026/
├── Emerging-Tech/
│ └── 2026/
├── Customer-Market/
│ └── 2026/
├── Policy-Regulation/
│ └── 2026/
└── Capital-Investment/
└── 2026/
输出路径格式：
{output}/{domain}/{YYYY}/{MM}/{YYYYMMDD}-{subject}-{feature}.md
其中：
{domain} - 情报领域（如 Threat-Landscape）{YYYY} - 发布年份（从 published_at 提取）{MM} - 发布月份（从 published_at 提取）{YYYYMMDD} - 发布日期{subject} - 主体/对象{feature} - 核心特征完整的 7 个领域 frontmatter 和正文模板，参见：
references/templates.md../cybersecurity-domain-knowledge/SKILL.md - 领域定义../intelligence-analysis-methodology/SKILL.md - 提取方法论情报报告包括日报、周报、月报、年报四种类型。
{output_dir}/reports/
├── daily/
│ └── 2026-04-06-daily.md # 日报
├── weekly/
│ └── 2026-W15-weekly.md # 周报
├── monthly/
│ └── 2026-03-monthly.md # 月报
└── annual/
└── 2026-annual.md # 年报
参见 references/daily-report-template.md
日报生成使用 intelligence-daily-writer Agent，参见：
../../agents/intelligence-daily-writer.md参见 references/weekly-report-template.md
周报生成使用 intelligence-weekly-writer Agent，参见：
../../agents/intelligence-weekly-writer.md参见 references/monthly-report-template.md
月报生成使用 intelligence-monthly-writer Agent，参见：
../../agents/intelligence-monthly-writer.md参见 references/annual-report-template.md