ioc — for Claude Code Claude-Pentest-Agent-Ecosystem, community, for Claude Code, ide skills, Intelligence, Extract, enrich, indicators, source, reports

v1.0.0
GitHub

About this Skill

Perfect for Cybersecurity Agents needing advanced Indicator of Compromise (IOC) extraction and enrichment capabilities. IOC extraction, enrichment, and threat intelligence correlation

Features

Extract and enrich indicators:
Extract IOCs from any source (reports, logs, samples)
Normalize and validate indicators
Enrich with threat intel (VT, AbuseIPDB, WHOIS)
Correlate infrastructure

# Core Topics

for Claude Code Intelligence Extract enrich indicators source
atiilla atiilla
[1]
[0]
Updated: 3/15/2026

Skill Overview

Start with fit, limitations, and setup before diving into the repository.

Perfect for Cybersecurity Agents needing advanced Indicator of Compromise (IOC) extraction and enrichment capabilities. IOC extraction, enrichment, and threat intelligence correlation

Core Value

Empowers agents to extract and enrich indicators from various sources, including reports, logs, and samples, using threat intel from VT, AbuseIPDB, and WHOIS, and correlate infrastructure for comprehensive security analysis.

Ideal Agent Persona

Perfect for Cybersecurity Agents needing advanced Indicator of Compromise (IOC) extraction and enrichment capabilities.

↓ Capabilities Granted for ioc

Extracting IOCs from threat reports and logs
Enriching indicators with threat intel for enhanced security context
Correlating infrastructure for advanced threat hunting and incident response

! Prerequisites & Limits

  • Requires source input (file path, text, or paste content)
  • Limited to specific IOC types (IPv4/IPv6, domains, URLs, hashes, emails, registry keys, file paths, mutexes)
  • Basic enrichment limited to WHOIS

About The Source

The section below comes from the upstream repository. Use it as supporting material alongside the fit, use-case, and installation summary on this page.

Labs Demo

Browser Sandbox Environment

⚡️ Ready to unleash?

Experience this Agent in a zero-setup browser environment powered by WebContainers. No installation required.

Boot Container Sandbox

FAQ & Installation Steps

These questions and steps mirror the structured data on this page for better search understanding.

? Frequently Asked Questions

What is ioc?

Perfect for Cybersecurity Agents needing advanced Indicator of Compromise (IOC) extraction and enrichment capabilities. IOC extraction, enrichment, and threat intelligence correlation

How do I install ioc?

Run the command: npx killer-skills add atiilla/Claude-Pentest-Agent-Ecosystem. It works with Cursor, Windsurf, VS Code, Claude Code, and 19+ other IDEs.

What are the use cases for ioc?

Key use cases include: Extracting IOCs from threat reports and logs, Enriching indicators with threat intel for enhanced security context, Correlating infrastructure for advanced threat hunting and incident response.

Which IDEs are compatible with ioc?

This skill is compatible with Cursor, Windsurf, VS Code, Trae, Claude Code, OpenClaw, Aider, Codex, OpenCode, Goose, Cline, Roo Code, Kiro, Augment Code, Continue, GitHub Copilot, Sourcegraph Cody, and Amazon Q Developer. Use the Killer-Skills CLI for universal one-command installation.

Are there any limitations for ioc?

Requires source input (file path, text, or paste content). Limited to specific IOC types (IPv4/IPv6, domains, URLs, hashes, emails, registry keys, file paths, mutexes). Basic enrichment limited to WHOIS.

↓ How To Install

  1. 1. Open your terminal

    Open the terminal or command line in your project directory.

  2. 2. Run the install command

    Run: npx killer-skills add atiilla/Claude-Pentest-Agent-Ecosystem. The CLI will automatically detect your IDE or AI agent and configure the skill.

  3. 3. Start using the skill

    The skill is now active. Your AI agent can use ioc immediately in the current project.

! Source Notes

This page is still useful for installation and source reference. Before using it, compare the fit, limitations, and upstream repository notes above.

Upstream Repository Material

The section below comes from the upstream repository. Use it as supporting material alongside the fit, use-case, and installation summary on this page.

Upstream Source

ioc

Install ioc, an AI agent skill for AI agent workflows and automation. Explore features, use cases, limitations, and setup guidance.

SKILL.md
Readonly
Upstream Repository Material
The section below comes from the upstream repository. Use it as supporting material alongside the fit, use-case, and installation summary on this page.
Upstream Source

IOC Intelligence

Extract and enrich indicators:

  • Extract IOCs from any source (reports, logs, samples)
  • Normalize and validate indicators
  • Enrich with threat intel (VT, AbuseIPDB, WHOIS)
  • Correlate infrastructure
  • Export in multiple formats

IOC Types

IPv4/IPv6, domains, URLs, hashes (MD5/SHA1/SHA256), emails, registry keys, file paths, mutexes

Required Context

  1. Source: File path, text, or paste content
  2. IOC Types: All or specific types
  3. Enrichment: Basic (WHOIS) or full (VT, Shodan)
  4. Output: JSON, CSV, STIX, MISP

Example

/ioc
Source: threat_report.pdf
Enrichment: Full
Output: JSON

Related Skills

Looking for an alternative to ioc or another community skill for your workflow? Explore these related open-source skills.

View All

openclaw-release-maintainer

Logo of openclaw
openclaw

openclaw-release-maintainer is an AI agent skill for openclaw release maintainer.

★ 333.8k
⑂ 0
AI

widget-generator

Logo of f
f

Generate customizable widget plugins for the prompts.chat feed system

★ 149.6k
⑂ 0
AI

flags

Logo of vercel
vercel

flags is an AI agent skill for use this skill when adding or changing framework feature flags in next.js internals.

★ 138.4k
⑂ 0
Browser

pr-review

Logo of pytorch
pytorch

pr-review is an AI agent skill for pytorch pr review skill.

★ 98.6k
⑂ 0
Developer