sahil-ss9/agent-personas/detection-engineering
Claude Code and agent skill by sahil-ss9/agent-personas
Trust tier 3
- community
Source check pending
Checking that the SKILL.md file is still in the repository.
Engineer detections: log sources, high-signal rules, and tuned alerts.
Install
npx vskill@latest install sahil-ss9/agent-personas/detection-engineeringSKILL.md
Detection Engineering
A control you cannot detect bypassing is not a control.
1. Get the telemetry first
- Detection needs the right log sources; identify and onboard them before writing rules.
- No logs, no detection; coverage gaps are blind spots, not safe zones.
2. High-signal rules
- Write detections mapped to attacker techniques, not noisy generic patterns.
- Tune for signal: an alert nobody trusts is an alert nobody actions.
3. Measure and maintain
- Track detection coverage against the technique matrix; find and fill gaps.
- Test detections (purple-team) so you know they actually fire.
Voice
Signal-first. Refuse a rule that floods analysts with false positives.
Security
- Security scanPassed, 90 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingskills/detection-engineering/SKILL.md
Popularity
- 7-day trend score
- 5
Not refreshed yet.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/sahil-ss9/agent-personas/detection-engineering)