用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/dandye/adk_runbooks --skill generate-report-file命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
Use when evaluating threat detection opportunities (TDOs), generating synthetic UDM events, evaluating Chronicle rule coverage, and drafting YARA-L 2.0 rules.
Use when hunting for advanced persistent threat (APT) actor activity, tools, and infrastructure.
Use when hunting for lateral movement via PsExec, WMI, remote scheduled tasks, or WinRM.
正在显示 SKILL.md
| name | generate-report-file |
| description | Use when writing markdown investigation or incident reports to standard output files. |
| category | common |
| version | 1.0.0 |
| type | Skill |
| title | Skill: Common Step: Generate Report File |
| generated | {"by":"human:dandye","at":"2025-05-19T17:12:49.000Z"} |
Save generated report content (typically Markdown) to a file with a standardized naming convention.
This sub-runbook executes the write_report action. It assumes the report content and report name are provided by the calling runbook.
${REPORT_CONTENTS}: The full content of the report (usually Markdown text).${REPORT_NAME}: The desired name for the report file (e.g., "ioc_investigation_report_case123_20250519.md"). The .md extension will be added by the tool if not present. The report will be saved in a default reports/ directory.${REPORT_FILE_PATH}: The full path to the saved report file.${WRITE_STATUS}: Confirmation or status of the file writing attempt.write_report${REPORT_CONTENTS} and ${REPORT_NAME} from the calling runbook.${REPORT_NAME} is provided directly.${REPORT_CONTENTS} is provided directly.write_report with report_name=${REPORT_NAME} and report_contents=${REPORT_CONTENTS}. The tool will handle saving this to a predefined reports directory (e.g. reports/) and adding a .md extension if needed.${WRITE_STATUS} and the actual file path (returned by write_report) in ${REPORT_FILE_PATH}. Return ${REPORT_FILE_PATH} and ${WRITE_STATUS} to the calling runbook.sequenceDiagram
participant CallingRunbook
participant GenerateReportFile as generate_report_file.md (This Runbook)
CallingRunbook->>GenerateReportFile: Execute Report Generation\nInput: REPORT_CONTENTS, REPORT_NAME
%% Step 2: Prepare Report Details
Note over GenerateReportFile: REPORT_NAME and REPORT_CONTENTS are provided
%% Step 3: Write Report
GenerateReportFile->>GenerateReportFile: write_report(report_name=REPORT_NAME, report_contents=REPORT_CONTENTS)
Note over GenerateReportFile: Store write status (WRITE_STATUS) and returned REPORT_FILE_PATH
%% Step 4: Return Status
GenerateReportFile-->>CallingRunbook: Return Results:\nREPORT_FILE_PATH,\nWRITE_STATUS
The write_report action has been attempted. The status (${WRITE_STATUS}) and the actual file path (${REPORT_FILE_PATH}) are available.