cti-orchestrator

What problem does it solve?

The orchestrator provides a single entry point for CTI requests that do not specify a target skill, classifies the request, delegates to downstream skills, and automatically applies rigor to the results to produce a source-rated, confidence-marked product. It does NOT query external APIs directly and is designed to compose other skills to perform the work.

Core Features & Use Cases

• Route ambiguous CTI requests to the right investigation or analysis skill (e.g., IOC, actor, campaign, malware, or threat assessment).
• Auto-apply rigor steps (source assessment, TLP, confidence, and likelihood) across outputs without user prompts.
• Coordinate multi-skill chains and ensure produced intelligence is prepared for writing or sharing.

Quick Start

Route an unknown CTI request to the orchestrator and observe it handing off to the appropriate downstream skill.