Open-source security automation platform for teams and AI agents
Tracecat is an open-source security automation platform where teams and AI agents build agents, workflows, cases, tables, and integrations. Security teams use it to automate operational work, either through its managed service or by self-hosting. The catalogue entries provide skills, commands, instructions, and settings for working with Tracecat.
This repository also configures its own agents. See what tracecat tells them →
Skill Claude CodeCodex
Load when the prompt's first line is Phishing message , followed by one Sublime message group as JSON. Takes one flagged or user-reported email from Sublime to a triaged case and a published Slack card. You read the group, pull its indicators with MQL, deduplicate it against existing cases, scope the campaign across…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: