asp-playbook-zh

Manage ASP playbook definitions and run histories via the MCP server.

1.1k|201|Updated Sep 7, 2025
One-click install
npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-playbook-zh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: asp-playbook-zh
Source: https://github.com/FunnyWolf/agentic-soc-platform/tree/main/PLUGINS/ClaudeCode/skills/asp-playbook-zh
Command: npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-playbook-zh

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables security teams to manage ASP playbooks and their run history from a single interface, reducing context switching and accelerating incident automation.

Core Features & Use Cases

  • Discover available playbook definitions to understand which automations can run against cases, alerts, or artifacts.
  • Trigger playbooks on target objects (cases, alerts, artifacts) and monitor their run status, outcomes, and historical records.
  • Review and audit playbook definitions and runs to improve incident response workflows and compliance.

Quick Start

Ask to list available playbook definitions or run a playbook on a specific target by providing its type and id.

Frequently Asked Questions about asp-playbook-zh

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate incident response playbooks on security alerts?

Automate incident response playbooks by triggering them on security alerts, cases, or artifacts. You can execute playbook definitions against target objects and monitor run status to accelerate incident automation.

How do I track and review playbook run history for cases and artifacts?

Track and review playbook run history by querying run records with filters against cases and artifacts. This maintains a strict separation between playbook definitions and run records for auditing.

What is the best way to discover available playbook definitions for automation workflows?

Discover available playbook definitions by listing them to understand which automations can run against cases, alerts, or artifacts. This helps identify applicable workflows for your incident response.

Can I manage ASP playbooks and runs through an MCP server?

Yes, you can manage ASP playbooks and runs through an MCP server. It handles input validation, authorization, and error handling to ensure safe operations during playbook execution.

How do I trigger a playbook on a specific alert or artifact?

Trigger a playbook on a specific alert or artifact by providing the target object type and its ID. The system then executes the playbook definition and records the run history.

Does ASP playbook management enforce separation between definitions and run records?

Yes, ASP playbook management enforces strict separation between playbook definitions and run records. This design supports compliance auditing and clear tracking of automation outcomes.