菜单
Create context handoff when pausing work mid-phase
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | thrunt-pause-work |
| description | Create context handoff when pausing work mid-phase |
| allowed-tools | Read, Write, Bash |
Routes to the pause-work workflow which handles:
<execution_context> @.github/thrunt-god/workflows/pause-work.md </execution_context>
State and phase progress are gathered in-workflow with targeted reads. **Follow the pause-work workflow** from `@.github/thrunt-god/workflows/pause-work.md`.The workflow handles all logic including:
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
