On-demand: research a threat and generate Sigma/YARA/Snort/Suricata rules (PoC/advisory-specific default, opt-in TTP; labeled compile-status × confidence; Splunk/CrowdStrike-portable; critic-gated). Autonomous: a daily routine researches qualifying feed items and commits detections.
Installation
1
Add the marketplace
/plugin marketplace add ThomasPark20/Actioner
2
Install plugins
/plugin
Run these commands in Claude Code to add this plugin to your environment. The marketplace must be added before you can install its plugins.