Agent Capability Analysis
The rs skill by dfirtnt is an open-source community AI agent skill for Claude Code and other IDE workflows, helping agents execute tasks with better context, repeatability, and domain-specific guidance.
Ideal Agent Persona
Perfect for Threat Hunting Agents needing automated Sigma rule generation and OSINT ingestion
Core Value
Empowers agents to rescore articles using keyword/regex hunt scores and ML hunt scores from chunk-level model predictions, leveraging threat_hunting_score and ml_hunt_score metadata with validation, utilizing commands like ./run_cli.sh rescore and ./run_cli.sh rescore-ml
↓ Capabilities Granted for rs
! Prerequisites & Limits
- Requires Huntable CTI Studio platform
- No commit or push; data-only operations
Browser Sandbox Environment
⚡️ Ready to unleash?
Experience this Agent in a zero-setup browser environment powered by WebContainers. No installation required.
rs
Install rs, an AI agent skill for AI agent workflows and automation. Works with Claude Code, Cursor, and Windsurf with one-command setup.
FAQ & Installation Steps
These questions and steps mirror the structured data on this page for better search understanding.
? Frequently Asked Questions
What is rs?
Perfect for Threat Hunting Agents needing automated Sigma rule generation and OSINT ingestion Huntable CTI Studio: open-source CTI platform for OSINT ingestion, observable extraction, and AI-assisted Sigma rule generation with validation.
How do I install rs?
Run the command: npx killer-skills add dfirtnt/Huntable-CTI-Studio. It works with Cursor, Windsurf, VS Code, Claude Code, and 19+ other IDEs.
What are the use cases for rs?
Key use cases include: Rescoring articles after changing scoring rules, Updating ML hunt scores after retraining models, Validating Sigma rules with AI-assisted generation.
Which IDEs are compatible with rs?
This skill is compatible with Cursor, Windsurf, VS Code, Trae, Claude Code, OpenClaw, Aider, Codex, OpenCode, Goose, Cline, Roo Code, Kiro, Augment Code, Continue, GitHub Copilot, Sourcegraph Cody, and Amazon Q Developer. Use the Killer-Skills CLI for universal one-command installation.
Are there any limitations for rs?
Requires Huntable CTI Studio platform. No commit or push; data-only operations.
↓ How To Install
-
1. Open your terminal
Open the terminal or command line in your project directory.
-
2. Run the install command
Run: npx killer-skills add dfirtnt/Huntable-CTI-Studio. The CLI will automatically detect your IDE or AI agent and configure the skill.
-
3. Start using the skill
The skill is now active. Your AI agent can use rs immediately in the current project.
