STIX/TAXII Intelligence Skill
DevOps & SecuritySTIX/TAXII Intelligence Skill is an Agent Skill for devops & security published in the a5c-ai/babysitter repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
STIX/TAXII threat intelligence format and sharing
QUICK START
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/a5c-ai/babysitter/blob/HEAD/library/specializations/security-research/skills/stix-taxii/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/stix-taxii-intelligence-skill, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
STIX/TAXII Intelligence Skill
Overview
This skill provides STIX/TAXII threat intelligence format creation, querying, and sharing capabilities.
Capabilities
- Create STIX 2.1 bundles
- Query TAXII servers
- Generate threat reports
- Create indicator relationships
- Map to MITRE ATT&CK
- Support OpenIOC format
- Validate STIX syntax
- Share intelligence feeds
Target Processes
- threat-intelligence-research.js
- malware-analysis.js
- security-advisory-writing.js
Dependencies
- stix2 library (Python)
- taxii2-client
- Python 3.x
- TAXII server access (optional)
Usage Context
This skill is essential for:
- Threat intelligence sharing
- IOC standardization
- Intelligence feed management
- Threat report generation
- Intelligence correlation
Integration Notes
- Supports STIX 2.0 and 2.1
- Can publish to TAXII servers
- Integrates with MISP
- Supports multiple IOC formats
- Can generate human-readable reports