tdir-insights
About tdir-insights
The default entry point for quickly reviewing threat insights: query candidate threat insights (including endpoint agent threat insights with topic=endpoint_agent_threat) and their existing verdicts, reports, alerts, rules, entities, provenance, and tickets; write back a human analyst verdict only after explicit user confirmation. Use by default when users view or ask about insight events (fetching only existing platform insights, endpoint data, and AI verdict information). Does not automatically retrieve evidence packages for deep investigation, treat insights as confirmed real events, or confirm writes on the user's behalf.
Install
Copy the command and run it in a terminal.
npx skills add https:/ / tdir-1258344699.cos.ap-guangzhou.myqcloud.com --skill tdir-insightsAfter installing, type/tdir-insightsin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/insight-detail-and-provenance.mdinsight-relations.mdinsight-search.mdlifecycle-clustering-and-updates.mdverdict-status-and-metrics.md