collect

Automate quarterly threat intelligence collection by running the collector agent with a specified quarter parameter, which gathers online findings and outputs a final report for security reviews.

Generating a curated threat intel report involves loading keyword configurations, detecting available search tools, analyzing results, and outputting candidate findings tailored to the specified quarter.

Filtering threat intelligence searches by category is supported, allowing security teams to tailor queries across specific threat classes and generate targeted findings for risk assessment.

The threat intel collector handles search tool detection by automatically identifying available MCP search tools during execution, then applying those tools to gather and analyze online threat data.

Keyword configurations are required to tailor searches across threat classes, but the collector agent loads these configurations automatically to streamline the quarterly intelligence gathering process.

Collected quarterly threat intelligence findings output as candidate findings and a final report, designed to feed directly into the Skill Guardian workflow for further security analysis.