Configure and verify CTI API keys for seven threat-intel integrations in Claude Code.
npx skills add https://github.com/Liberty91LTD/cti-skills --skill cti-setup
Please help me install this Agent Skill. Skill: cti-setup Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/cti-setup Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill cti-setup
In-chat configuration of API keys for the CTI skills pack. Use this when you want to configure the seven threat-intel integrations inside Claude Code without dropping to a shell, and to keep keys synchronized and secure within the pack.
Configure your CTI API keys for all integrations directly in Claude Code.
High-intent search queries and answers about installing and using this skill.
You can configure threat intelligence API keys for VirusTotal, Shodan, and other integrations directly in Claude Code by running the cti-setup skill, which performs a non-destructive merge into your local settings file without dropping to a shell.
The supported threat intel integrations include VirusTotal, URLScan, Shodan, AbuseIPDB, GreyNoise, AlienVault OTX, and Censys, allowing you to manage all seven API keys within chat workflows.
Yes, you can rotate and verify CTI API keys entirely within the chat interface, as the skill provides guidance for key rotation, troubleshooting, and validation that keys are wired up for live lookups.
Configuring CTI keys does not overwrite existing settings because the skill performs a non-destructive merge into .claude/settings.local.json, preserving your current configuration while adding or updating keys.
You need to re-run API key configuration after plugin installs to validate that keys are correctly wired up for live lookups and to ensure all threat-intel integrations remain synchronized and secure within the pack.
The best way to onboard new keys for multiple threat intel platforms is to use an in-chat configuration skill that guides you through setup, verification, and non-destructive merging for all integrations in a single workflow.
Liberty91LTDRoute IOCs to threat intel tool agents and synthesize enrichment results.
mikopbxRetrieve MikoPBX Docker container IPs, ports, and API URLs.
YukiIto1999Collect threat intelligence from MISP using PyMISP and export IOCs to STIX.
iamladiCompare environment variable keys across .env files and shell against templates.
