# YARA Rules Skill

> YARA Rules Skill is an Agent Skill for devops & security published in the a5c-ai/babysitter repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

YARA rule creation, testing, and deployment

- Skill name: `YARA Rules Skill`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/a5c-ai/babysitter/blob/HEAD/library/specializations/security-research/skills/yara-rules/SKILL.md
- Repository: a5c-ai/babysitter (1,548 GitHub stars when collected)

## SKILL.md

# YARA Rules Skill

## Overview

This skill provides capabilities for YARA rule creation, testing, and deployment for malware detection and threat hunting.

## Capabilities

- Generate YARA rules from samples
- Validate YARA rule syntax
- Test rules against sample sets
- Optimize rules for performance
- Create rule metadata and documentation
- Support YARA modules (PE, ELF, etc.)
- Integrate with VirusTotal YARA
- Generate Sigma rules for correlation

## Target Processes

- malware-analysis.js
- threat-intelligence-research.js
- security-tool-development.js

## Dependencies

- YARA CLI
- yara-python library
- VirusTotal API (optional)
- Sample malware corpus (for testing)

## Usage Context

This skill is essential for:
- Malware detection rule development
- Threat hunting operations
- IOC-based detection
- Malware family classification
- Automated sample triage

## Integration Notes

- Rules can be tested against known good/bad samples
- Performance metrics help optimize detection speed
- Supports rule versioning and documentation
- Can export to multiple detection platforms
- Integrates with YARA-L for Chronicle

---

Source: https://www.openparable.com/skill/devops-security/yara-rules-skill (OpenParable). Cite the canonical URL above.