菜单
Threat intelligence analysis of IoCs (IPs, domains, hashes, URLs) via CyberBro (33 engines including Shodan/AbuseIPDB/VirusTotal) + Brave Search enrichment.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | ioc-analyze |
| description | Threat intelligence analysis of IoCs (IPs, domains, hashes, URLs) via CyberBro (33 engines including Shodan/AbuseIPDB/VirusTotal) + Brave Search enrichment. |
| trigger_patterns | ["ioc","analyze ip","suspicious domain","hash analysis","threat intel","virustotal"] |
| tools_required | ["exec","cyberbro","search_router"] |
| examples | ["185.220.101.34","suspicious-domain.xyz","d41d8cd98f00b204e9800998ecf8427e","https://malware-c2.example.com/beacon"] |
| model | qwen3.5-35b-a3b |
| execution | {"command":"bash /home/remondiere/.openclaw/bin/ioc_analyze.sh '$args'","timeout_ms":180000,"arg_mode":"raw"} |
Analyse automatique d'observables (IP, domaines, hashes, URLs) via CyberBro + Brave Search.
Rapport structuré avec :
Code architecture design with web-informed debate between Architect and Reviewer agents — produces ASCII diagrams, justified stack, patterns (SOLID/DDD/CQRS), phased implementation plan.
Multi-turn brainstorming session with RAG, domain profiles (code/tech/btp/cyber/finance), Claude Opus or local Qwen3.5 backend.
CSV analysis via 2-pass SOTA orchestrator (score 54/55 on 7 CSVs). Statistics, data profiling, visualizations, insights.
Multi-perspective reasoning (advocate/critic/synthesizer). Three modes - general, --code for architecture decisions, --medical for EBM clinical analysis.
Deep reflection with web search — Brave/Perplexica pipeline fed into Qwen3.5-35B thinking mode for grounded, well-reasoned answers.
MCP CLI — list, configure, auth, and call MCP servers/tools directly (HTTP or stdio), including ad-hoc servers, config edits, and CLI/type generation.
