One-click install
npx skills add https://github.com/srednoff888-art/4 --skill update-threat-db
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: update-threat-db
Source: https://github.com/srednoff888-art/4/tree/main/examples/skills/update-threat-db
Command: npx skills add https://github.com/srednoff888-art/4 --skill update-threat-db

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams maintain a living AI agent threat intelligence database by aggregating, deduplicating, and updating entries for threats, CVEs, malicious skills, and campaigns.

Core Features & Use Cases

  • Structured threat updates: reads the current threat-db.yaml, identifies gaps, and imports credible new entries from security research sources.
  • Scope-driven workflow: coordinates phases for assessment, research, deduplication, and update, ensuring traceability and repeatability.
  • Use Case: monthly threat-hunt teams refresh the database after major advisories to keep defenses current.

Quick Start

Run the phase-based workflow to update the threat-db.yaml with new threats, campaigns, and CVEs using Perplexity MCP.

Frequently Asked Questions about update-threat-db

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I update an AI agent threat intelligence database with new CVEs and campaigns?

To update an AI agent threat intelligence database, you can run a phase-based workflow that reads your existing threat-db.yaml, researches new entries via Perplexity MCP, validates sources, deduplicates records, and writes structured updates for threats, CVEs, and campaigns.

What is the best way to maintain a YAML threat database for MCP vulnerabilities?

Maintaining a YAML threat database for MCP vulnerabilities involves aggregating credible security research, categorizing open-source agent tool risks, validating sources, and enforcing YAML integrity to ensure the threat intelligence remains structured and actionable.

How does deduplication work when adding new malicious skills to threat intelligence?

Deduplication for malicious skills entries works by reading the current threat database, identifying gaps or overlapping records, validating new sources, and structuring the imported data to ensure no redundant threat entries persist in the YAML file.

Can I use this workflow to research and categorize AI agent security threats?

Yes, this workflow coordinates structured phases for assessment, research, deduplication, and update, allowing security teams to research and categorize new threats, malicious skills, and attack techniques specifically within AI agent security contexts.

What sources are needed to enrich a threat database with vulnerability research?

Enriching a threat database with vulnerability research uses the Perplexity MCP to gather credible security advisories and threat intelligence, which are then categorized and validated before updating the threat-db.yaml file.

When should security teams refresh their threat intelligence database for AI agents?

Security teams should refresh their threat intelligence database after major security advisories or during monthly threat-hunts to keep defenses current against new MCP vulnerabilities, open-source agent tool exploits, and emerging attack campaigns.