Stats
Actions
Available In
Tags
Plugin
secops-factory
ICS/OT Security Operations — CVE enrichment, event investigation, MITRE ATT&CK mapping, and adversarial quality review with convergence-driven analysis.
What's Inside
Slash Commands14
Adversarial Review Secops
/adversarial-review-secops
Multi-pass adversarial convergence review of security analyses
Assess Priority
/assess-priority
Calculate multi-factor priority (P1-P5) for a vulnerability
Create Advisory
/create-advisory
Create a structured security advisory for a CVE, threat campaign, or vendor bulletin. Supports IT, ICS/OT, and combined audiences with built-in or custom templates.
Enrich Ticket
/enrich-ticket
Complete 8-stage enrichment workflow for a security ticket
Fact Verify
/fact-verify
Verify factual claims against authoritative sources
Agents6
advisory-writer
/advisory-writer
Use when creating security advisories, scanning for emerging threats, or drafting advisory bulletins for IT, ICS/OT, or combined audiences.
orchestrator-enrichment-workflow
/enrichment-workflow
Orchestrator workflow reference for the 8-stage CVE enrichment pipeline. Loaded by the enrich-ticket skill. Not directly invokable.
orchestrator-investigation-workflow
/investigation-workflow
Orchestrator workflow reference for the 7-stage security event investigation pipeline. Loaded by the investigate-event skill. Not directly invokable.
orchestrator-review-convergence
/review-convergence-workflow
Orchestrator workflow reference for the adversarial review convergence loop. Loaded by the adversarial-review-secops skill. Not directly invokable.
security-analyst
/security-analyst
Use when performing vulnerability enrichment, CVE research, security ticket analysis, risk assessment, MITRE ATT&CK mapping, or security event investigation for ICS/OT and enterprise environments.
Skills13
adversarial-review-secops
/adversarial-review-secops
Use when performing multi-pass adversarial convergence review of security analyses. Dispatches security-reviewer in fresh-context passes with strict-binary novelty until convergence. Quality thresholds: >=7.0/10 overall, no dimension <5.0.
assess-priority
/assess-priority
Use when calculating multi-factor vulnerability priority. Combines CVSS severity, EPSS exploitation probability, CISA KEV status, asset criticality, system exposure, and exploit availability into P1-P5 with SLA.
create-advisory
/create-advisory
Use when creating a structured security advisory for a CVE, threat campaign, or vendor bulletin. Supports IT, ICS/OT, and combined audiences. Accepts built-in or custom templates.
enrich-ticket
/enrich-ticket
Use when enriching a security ticket with vulnerability intelligence. Executes 8-stage enrichment: triage, CVE research, business context, remediation, ATT&CK mapping, priority assessment, documentation, JIRA update.
fact-verify
/fact-verify
Use when verifying factual claims in security analyses against authoritative sources. Supports CVE claim verification and event investigation verification.
Stats
Version0.5.3
Released
LanguageShell
Stars0
MaintenanceGood
LicenseMIT
Last Commit
Added
Available In
Safety Signals
Caution
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Tags
