orca-alert-triage

Solid

Analyzes Orca Security alerts with timeline visualization, risk assessment, and progressive disclosure. Use when user asks to triage, analyze, explain, summarize, investigate, or check an Orca alert by ID (e.g., "triage orca-3636513", "what is alert orca-3548863", "check orca-3636513").

AI & Automation 50 stars 9 forks Updated 5 days ago MIT

Install

View on GitHub

Quality Score: 83/100

Stars 20%
57
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Orca Alert Triage Skill Formats Orca Security alerts into analyst-friendly summaries with behavioral timelines, risk analysis, and progressive disclosure of investigation steps. ## Usage ``` /orca-alert-triage <alert-id> /orca-alert-triage orca-3636513 /orca-alert-triage orca-3548863 ``` Or natural language: - "triage alert orca-3636513" - "explain orca-3548863" - "analyze alert orca-3636513" ## What This Skill Does 1. **Fetches alert data** from Orca Security via MCP 2. **Analyzes timeline** to identify behavioral patterns and remediation blockers 3. **Calculates blast radius** by checking related assets and correlation 4. **Formats output** with progressive disclosure (summary first, details on request) 5. **Provides contextual recommendations** based on alert type and severity ## Output Format ### Initial Summary (Always Shown) ``` ═══════════════════════════════════════════════════════════════════ ALERT TITLE ═════════════════════���═════════════════════════════════════════════ VERDICT: <assessment> | CONFIDENCE: <percent> | ACTION: <what to do> | TIMELINE: <when> ──────────────────────────────────────────────────────────��──────── ALERT TIMELINE ─────────────────────────────────────────────────────────────────── BEHAVIORAL PATTERN / VULNERABILITY LIFECYCLE: [Visual timeline with key events] RECURRENCE: <pattern analysis> ESCALATION: <status change summary> RED FLAGS: <critical indicators if present> ────────────────────────────────────────────────────...

Details

Author
orcasecurity
Repository
orcasecurity/orca-skills
Created
4 months ago
Last Updated
5 days ago
Language
N/A
License
MIT

Bundled in these plugins

Similar Skills

Semantically similar based on skill content — not just same category