Detect — Development skill for Claude Code
Correlation rules and detection management.
How to install Detect
Installs to ~/.claude/skills/alexpekarovsky-cortex-skills-detect/SKILL.md
mkdir -p ~/.claude/skills/alexpekarovsky-cortex-skills-detect && curl -fsSL https://raw.githubusercontent.com/alexpekarovsky/cortex-skills/HEAD/.claude/skills/detect.md -o ~/.claude/skills/alexpekarovsky-cortex-skills-detect/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Detect does
name: detect description: Correlation rules and detection management
Detect Skill
CLI path: `python3 /Users/apekarovsky/projects/cortex-skills/cortex_cli.py`
Triggers on: correlation rule, detection, XQL rule, SIEM rule
Commands
| Command | What it does | Example |
|---|---|---|
list-rules |
List correlation rules | python3 cortex_cli.py list-rules --filter "powershell" |
create-rule |
Create a correlation rule | `python3 cortex_cli.py create-rule |
Alternatives in Development
- Sanitize — Detect and redact PII from text files — 15 categories (SSNs, credit cards, API keys, etc.), zero dependencies 3.1k ★
- Content Shipped — Proactively detect and log shipped content when user mentions publishing, launching, or completing work 1k ★
- Translation Detect — 同步原版更新、检测翻译状态、制定同步计划, 完成后自动建议执行翻译 695 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Correlation Check
Analyze portfolio correlations, detect regime breaks, and identify hidden exposures
Detect Agent
Agent detection definitions and lightweight utility
Secrets Management
Keep credentials out of code and logs; detect, rotate, and shrink the blast radius.
Gc Golden Rules
Periodic golden rules GC — detect Rule 7 violations and docs drift, then create tq actions for fixes
Secret Scan
Scan working directory untuk secrets — gitleaks detect mode, custom rules, fail-fast kalau ada leak.
Gc
Use when: you need to run Harness GC signal detection, review drafts, adopt/reject remediations, and feed less
Related Agents
Risk Specialist
Portfolio risk management, volatility analysis, and market microstructure. Use for VaR calculations, correlati
Detection Engineer
Delegates to this agent when the user asks about detection rules, SIEM queries, threat hunting, indicator anal
Application Security
Manage Application Security Management (ASM) including WAF rules, threat detection, API protection, and applic