siem

Experiment Design Engineer — Experiment design — A/B testing, statistical power, experiment tracking, causal inference

Cache skill: cache-design

Build a forecasting model for a time series

Security Operations Team bundle — 10 agents: Red, Blue, Hunt, Patch, Chain, Sast, Siem, Resp, Zero, Phish

Analyze and fix a SAST finding with secure code alternative

Write SIEM detection rules in SIGMA format with MITRE mapping

AI Operations Team — Embed: Embedding model selection, vector pipeline design, similarity search, and production index management.

Terra skill: terra-module

Contribute a discovery back to the upstream tonone repo — new skill, improved agent prompt, better routing rule. Use when you hit a gap, found a better pattern, or built something reusable that others would benefit from.

Design a SAST/DAST scanning pipeline — tooling and CI integration