limacharlie-call

What problem does it solve?

This Skill centralizes LimaCharlie operations by dynamically loading function references and routing calls through the limacharlie-api-executor. It provides a safe, user-level interface to list orgs, sensors, rules, detections, and hundreds of functions without exposing direct MCP calls. The Skill enforces correct OID usage (UUIDs), loads API docs, and loads guidelines via /init-lc before use.

Core Features & Use Cases

• Load and route LimaCharlie API calls through a single, safe agent
• Spawn parallel agents for multi-organization operations and aggregate results
• Access a comprehensive function library (150+ functions) including sensors, outputs, D&R rules, lookups, and more
• Enforce best practices: never call MCP tools directly, never write LCQL or D&R syntax manually
• Quick-start conventions: spawn org reporters, generate LCQL queries, validate rules, and deploy

Quick Start

Example: List all accessible organizations and start a parallel data collection job across them.