基于 SOC 职业分类
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/backbay-labs/thrunt-god --skill thrunt-review-backlog命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
| name | thrunt-review-backlog |
| description | Review and promote backlog items to active milestone |
| allowed-tools | Read, Write, Bash |
List backlog items:
ls -d .planning/phases/999* 2>/dev/null || echo "No backlog items found"
Read HUNTMAP.md and extract all 999.x phase entries:
cat .planning/HUNTMAP.md
Show each backlog item with its description, any accumulated context (CONTEXT.md, RESEARCH.md), and creation date.
Present the list to the user via AskUserQuestion:
For items to PROMOTE:
999.x-slug to {new_num}-slug:
NEW_NUM=$(node ".github/thrunt-god/bin/thrunt-tools.cjs" phase add "${DESCRIPTION}" --raw)
## Backlog section to the active phase list(BACKLOG) marker**Depends on:** fieldFor items to REMOVE:
## Backlog sectionCommit changes:
node ".github/thrunt-god/bin/thrunt-tools.cjs" commit "docs: review backlog — promoted N, removed M" --files .planning/HUNTMAP.md
Report summary:
## 📋 Backlog Review Complete
Promoted: {list of promoted items with new phase numbers}
Kept: {list of items remaining in backlog}
Removed: {list of deleted items}