mcpField

tdir-insights

tdir-1258344699.cos.ap-guangzhou.myqcloud.comSecurity79 installs

About tdir-insights

The default entry point for quickly reviewing threat insights: query candidate threat insights (including endpoint agent threat insights with topic=endpoint_agent_threat) and their existing verdicts, reports, alerts, rules, entities, provenance, and tickets; write back a human analyst verdict only after explicit user confirmation. Use by default when users view or ask about insight events (fetching only existing platform insights, endpoint data, and AI verdict information). Does not automatically retrieve evidence packages for deep investigation, treat insights as confirmed real events, or confirm writes on the user's behalf.

Install

Copy the command and run it in a terminal.

$npx skills add https://tdir-1258344699.cos.ap-guangzhou.myqcloud.com --skill tdir-insights

After installing, type/tdir-insightsin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/
insight-detail-and-provenance.md
insight-relations.md
insight-search.md
lifecycle-clustering-and-updates.md
verdict-status-and-metrics.md

Comments

Markdown supported