Agent-Skills.md

Agent Skills: Senior SecOps

Security operations workflow for vulnerability triage, incident response, detection/alerting improvements, and post-incident hardening. Use when responding to security alerts, reviewing logs for suspicious activity, building incident playbooks, or running quick log summaries during triage.

UncategorizedID: GuicedEE/ai-rules/senior-secops

Repository

GuicedEE/ai-rules
GuicedEELicense: Apache-2.0
5

Install this agent skill to your local

pnpm dlx add-skill https://github.com/GuicedEE/ai-rules/tree/HEAD/skills/.curated/senior-secops

Skill Files

Browse the full folder contents for senior-secops.

Download Skill

Loading file tree…

skills/.curated/senior-secops/SKILL.md

Skill Metadata

Name
senior-secops
Description
"Triage security alerts and vulnerabilities, investigate suspicious logs, and develop incident-response playbooks."

Senior SecOps

Respond fast, contain blast radius, and learn permanently.

Quick Start (incident workflow)

  1. Triage: what’s impacted, is it ongoing, and what data is at risk?
  2. Contain: disable credentials, block IOCs, isolate systems.
  3. Eradicate: patch root cause, rotate secrets, remove persistence.
  4. Recover: restore service safely; verify integrity.
  5. Learn: write a postmortem and ship preventative controls.

Optional tool: summarize a log file

python ~/.codex/skills/senior-secops/scripts/log_triage.py /path/to/log.txt --out /tmp/log_report.json

References

  • Incident worksheet: references/incident-worksheet.md