What problem does it solve?
This Skill helps you research, verify, and publish claims with trustworthy sourcing by triangulating evidence across multiple primary or authoritative references and assigning explicit confidence.
Core Features & Use Cases
- Source triangulation and fact-checking: Requires corroboration across at least three independent sources and discourages single-source “confirmed” claims.
- Evidence-first threat intelligence workflow: Supports investigation of IOCs, threat actors, campaigns, and adversary activity with structured CTI normalization.
- Confidence scoring and recency checks: Produces confidence scores, flags stale information (e.g., older than 18 months for fast-moving domains), and surfaces conflicts instead of silently resolving them.
- Interoperable outputs for CTI: Guides mapping to STIX 2.1 / TAXII 2.1 concepts and emphasizes IOC storage and graph-based relationship modeling.
- Use case: Verify a competitive or security allegation (e.g., “Group X targeted org Y using IOC Z”) by cross-checking feeds, confirming dates, and producing a cited report that distinguishes confirmed findings from hypotheses.
Quick Start
Use the research-analyst skill to investigate the claim “IOC hash X is linked to threat group Y” and return a cited assessment with confidence scores and source dates.