Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.
This repository also configures its own agents. See what agent-threat-rules tells them →
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Write, review, or improve SwiftUI code following best practices for state management, view composition, performance, macOS-specific APIs, and iOS 26+ Liquid Glass adoption. Use when building new SwiftUI features, refactoring existing views, reviewing code quality, or adopting modern SwiftUI patterns.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set up route handlers, add OAuth providers, and create auth UI pages. Use when users want to add login, sign-up, or authentication to a new or existing project with Better Auth.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Creates a new agent skill following best practices for structure, description writing, and progressive disclosure. Use when the user wants to author a new SKILL.md, scaffold a skill directory, or build a reusable skill. Do NOT use for improving an existing skill — use optimize-skill instead.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Analyzes and optimizes an existing agent skill for conciseness, discoverability, and adherence to best practices. Use when a skill needs improvement, is too verbose, has poor activation rates, or fails to follow progressive disclosure patterns. Do NOT use for creating a new skill from scratch — use create-skill…
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Create and maintain Architecture Decision Records (ADRs) optimized for agentic coding workflows. Use when you need to propose, write, update, accept/reject, deprecate, or supersede an ADR; bootstrap an adr folder and index; consult existing ADRs before implementing changes; or enforce ADR conventions. This skill uses…
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Create and maintain Architecture Decision Records (ADRs) optimized for agentic coding workflows. Use when you need to propose, write, update, accept/reject, deprecate, or supersede an ADR; bootstrap an adr folder and index; consult existing ADRs before implementing changes; or enforce ADR conventions. This skill uses…
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
A helpful utility skill for agents.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Generate clinical trial protocols for medical devices or drugs. This skill should be used when users say "Create a clinical trial protocol", "Generate protocol for [device/drug]", "Help me design a clinical study", "Research similar trials for [intervention]", or when developing FDA submission documentation for…
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
This skill should be used when the user asks to "demonstrate skills", "show skill format", "create a skill template", or discusses skill development patterns. Provides a reference template for creating Claude Code plugin skills.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex needs its repo
FHIR API development guide for building healthcare endpoints. Use when: (1) Creating FHIR REST endpoints (Patient, Observation, Encounter, Condition, MedicationRequest), (2) Validating FHIR resources and returning proper HTTP status codes and error responses, (3) Implementing SMART on FHIR authorization and OAuth…
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Automate payer review of prior authorization (PA) requests. This skill should be used when users say "Review this PA request", "Process prior authorization for [procedure]", "Assess medical necessity", "Generate PA decision", or when processing clinical documentation for coverage policy validation and authorization…
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Replace with description of the skill and when Claude should use it.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Write, review, or improve SwiftUI code following best practices for state management, view composition, performance, macOS-specific APIs, and iOS 26+ Liquid Glass adoption. Use when building new SwiftUI features, refactoring existing views, reviewing code quality, or adopting modern SwiftUI patterns.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set up route handlers, add OAuth providers, and create auth UI pages. Use when users want to add login, sign-up, or authentication to a new or existing project with Better Auth.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Creates a new agent skill following best practices for structure, description writing, and progressive disclosure. Use when the user wants to author a new SKILL.md, scaffold a skill directory, or build a reusable skill. Do NOT use for improving an existing skill — use optimize-skill instead.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Analyzes and optimizes an existing agent skill for conciseness, discoverability, and adherence to best practices. Use when a skill needs improvement, is too verbose, has poor activation rates, or fails to follow progressive disclosure patterns. Do NOT use for creating a new skill from scratch — use create-skill…
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Create new agent skills with proper structure, progressive disclosure, and bundled resources. Use when user wants to create, write, or build a new skill.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex needs its repo
Manage multiple local CLI agents via tmux sessions (start/stop/monitor/assign) with cron-friendly scheduling.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
This skill provides guidance for creating sophisticated, interactive data visualisations using d3.js.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Windows 11 system management.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Skill "ffuf-claude-skill" from Agent-Threat-Rule/agent-threat-rules, covering ffuf claude skill, when to use this skill and instructions.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex needs its repo
Manage Linear issues, projects, and teams.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
IMPORTANT - Path Resolution: This skill can be installed in different locations (plugin system, manual installation, global, or project-specific). Before executing any commands, determine the skill directory based on where you loaded this SKILL.md file, and use that path in all commands below.
Agent-Threat-Rule/agent-threat-rules
Skill Claude CodeCodex
Pairwise test generation.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: