Generate a daily threat advisory digest from SBOMs and threat feeds.
npx skills add https://github.com/kkmookhey/shasta --skill threat-advisory
Please help me install this Agent Skill. Skill: threat-advisory Source: https://github.com/kkmookhey/shasta/tree/main/.claude/skills/threat-advisory Command: npx skills add https://github.com/kkmookhey/shasta --skill threat-advisory
Tailored threat intelligence saves security teams hours by filtering global risk data to focus on your tech stack.
Use this skill to generate a daily threat advisory for your current cloud stack.
High-intent search queries and answers about installing and using this skill.
To generate a personalized threat intelligence digest, you need to build a tech-stack profile from SBOMs and threat feeds to surface KEV, supply chain, and CVE advisories. The generate_daily_advisory workflow automates this filtering process for your environment.
Yes, you can use SBOMs to filter CVE and KEV advisories in AWS or Azure by applying the generate_daily_advisory workflow. This requires an authenticated AWS or Azure client to discover SBOMs and match them against active threat feeds.
Yes, an authenticated AWS or Azure client is required to discover SBOMs and generate threat advisories. This authenticated access allows the system to build your tech-stack profile and accurately map threat intelligence feeds to your specific environment.
The best way to prioritize patching is to run a daily threat advisory that combines SBOM-driven context with threat intel feeds. This surfaces actionable KEV and supply chain advisories, providing a prioritized briefing that directly guides your security controls.
SBOM-driven context improves threat intelligence feeds by filtering global risk data to match your specific tech stack. This combination surfaces actionable advisories for remediation, saving security teams hours by focusing strictly on relevant KEV and CVE vulnerabilities.
Generating threat advisories without SBOMs limits the ability to build a tech-stack profile, meaning the system cannot filter threat intelligence feeds to your specific environment. Accurate KEV and CVE advisory generation relies entirely on SBOM discovery and authenticated cloud client access.
grafanaConfigure private cloud connectivity to Grafana Cloud telemetry across AWS, Azure, and GCP.
travelinman1013Coordinate GitHub Security Advisory responses from detection through synchronized public release.
VulnetixIdentify and summarize exploit intelligence for repository dependencies.
jaskaranhundalAssesses software supply chain risks via dependency, build pipeline, and SBOM analysis.
