Security Detection Rule Management
elastic/agent-skillsSecurity teams can manage detection rules for Elastic Security. This skill helps create new rules to find emerging threats. It also tunes existing rules to reduce false positives. You can add exceptions for noisy rules and improve coverage. Everything works through the Kibana API.
This is useful for anyone handling SIEM or Endpoint alerts. You can investigate alerts and adjust rules without manual work. The skill includes tools to fetch rule definitions and run queries.
Make sure you have Node.js 22+ and network access to Kibana and Elasticsearch. Set the required environment variables before using the tools.
Add Security Detection Rule Management skill to your workflow
Global
mkdir -p ~/.claude/skills/security-detection-rule-managementProject
mkdir -p .claude/skills/security-detection-rule-managementSource Repository
More Security Claude Code Skills
Azure Compliancemicrosoft/azure-skills
Audit Azure compliance and Key Vault expiration with azqr scans
Firebase Security Rules Auditorfirebase/agent-skills
Find weak spots in Firestore rules and get clear fixes
Golang Securitysamber/cc-skills-golang
Find and fix security flaws in Go code using expert guidance and automated tools
Clerk Nextjs Patternsclerk/skills
Secure your Next.js app with Clerk middleware, server actions, and caching
Persona It Admingoogleworkspace/cli
Keep your digital workspace safe with IT admin security workflows
Two Factor Authentication Best Practicesbetter-auth/skills
Secure user logins with two-factor authentication using Better Auth
Gws Modelarmor Create Templategoogleworkspace/cli
Create new templates for Google Model Armor to protect AI apps from harmful content
Gws Modelarmor Sanitize Promptgoogleworkspace/cli
Clean user prompts safely with Google Model Armor templates