xsoar-playbook-analysis

What problem does it solve?

Provides a structured, repeatable way to evaluate Cortex XSOAR 6.14 playbook exports for structural defects, anti-patterns, missing documentation, and operational risks so teams can improve automation reliability and maintainability.

Core Features & Use Cases

• Schema Reference: Enumerates key top-level playbook fields and task object structure to validate exported JSON.
• Checklist-Based Analysis: Eight-category checklist covering error handling, hardcoded values, decomposition, polling, conditional logic, documentation, readability, and performance with severity grading.
• Report Template: Produces a templated Markdown report suitable for investigation/reports with a severity summary and prioritized recommendations.
• Use Case: A SOC automation engineer runs this analysis on a newly imported playbook to identify silent-error swallowing, hardcoded integration endpoints, and unreachable tasks before deployment.

Quick Start

Analyze the attached playbook JSON export and generate a Playbook Analysis report that lists findings by severity and includes remediation recommendations.