gocortex-skills plugin
GoCortexIO skill bundles for the Palo Alto Networks Cortex Platform.
How to install the gocortex-skills plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add gocortexio/skills
/plugin install gocortex-skills@gocortexio-skillsWhat's inside gocortex-skills
2 parts read from the plugin's own files.
Skills 2
Claude loads it when the task matches- cortex-platform-advisory-consultant
Consult on what a vendor technology has historically been caught up in, what to detect as a result, and what to do about it once found. Answers three questions from a corpus of 1,142 threat advisory records joined to MITRE ATT&CK and D3FEND. One, scoping -- "I run this technology, what should I worry about" -- which works even when the corpus has never heard of the product. Two, rule design -- "here are the patterns or techniques I am considering, what does the corpus say". Three, coverage -- "what should I build that I have not got", ranked by gap against what the caller already implements. Answers cover the management, control and data planes, not only the plane the ranking favours. Use whenever someone names a firewall, VPN, EDR, cloud platform, OT device or any product they run and asks what to worry about, what to detect, what use cases to build, or where coverage is thin.
- cortex-platform-xdm-author
Author Cortex XSIAM Data Model Rules in Cortex Query Language (XQL). Turns a raw vendor log sample into a production-ready rule with a MAPPED-header comment block.
Using gocortex-skills in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update gocortex-skills@gocortexio-skills
- Refresh the marketplace
- /plugin marketplace update gocortexio-skills
- Turn it off for now
- /plugin disable gocortex-skills@gocortexio-skills
- Remove it
- /plugin uninstall gocortex-skills@gocortexio-skills
Skills in gocortex-skills
- cortex-platform-advisory-consultantgocortexio/skills
Consult on what a vendor technology has historically been caught up in, what to detect as a result, and what to do about it once found. Answers three questions from a corpus of 1,142 threat advisory records joined to MITRE ATT&CK and D3FEND. One, scoping -- "I run this technology, what should I worry about" -- which works even when the corpus has never heard of the product. Two, rule design -- "here are the patterns or techniques I am considering, what does the corpus say". Three, coverage -- "what should I build that I have not got", ranked by gap against what the caller already implements. Answers cover the management, control and data planes, not only the plane the ranking favours. Use whenever someone names a firewall, VPN, EDR, cloud platform, OT device or any product they run and asks what to worry about, what to detect, what use cases to build, or where coverage is thin.
18 files7stars - cortex-platform-xdm-authorgocortexio/skills
Author Cortex XSIAM Data Model Rules in Cortex Query Language (XQL). Turns a raw vendor log sample into a production-ready rule with a MAPPED-header comment block.
66 files7stars
gocortex-skills plugin questions
How do I install the gocortex-skills plugin?
In Claude Code run /plugin marketplace add gocortexio/skills, then /plugin install gocortex-skills@gocortexio-skills.
What does the gocortex-skills plugin include?
gocortex-skills bundles 2 skills.
How do I update or remove the gocortex-skills plugin?
Update it with claude plugin update gocortex-skills@gocortexio-skills in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall gocortex-skills@gocortexio-skills.
What license is the gocortex-skills plugin under?
AGPL-3.0-or-later, as stated in the plugin's manifest.