claudeindex
Plugin

actioner

On-demand: research a threat and generate Sigma/YARA/Snort/Suricata rules (PoC/advisory-specific default, opt-in TTP; labeled compile-status × confidence; Splunk/CrowdStrike-portable; critic-gated). Autonomous: a daily routine researches qualifying feed items and commits detections.

Installation

1

Add the marketplace

/plugin marketplace add ThomasPark20/Actioner
2

Install plugins

/plugin

Run these commands in Claude Code to add this plugin to your environment. The marketplace must be added before you can install its plugins.