Catch security threats and coordinate your response.
Detects security threats and coordinates alerts, incident response, and compliance reporting.
When to use it
Use for security monitoring, threat detection, incident response, and compliance workflows.
On ransomware or phishing alerts, it applies response playbooks that contain threats and create incident records.
Declares security-mcp as the server providing SIEM queries, alert creation, incident management, and compliance checks.
This skill
mailboxes
Deletes phishing emails from mailboxes (irreversible)
slack
Posts security alerts to Slack (irreversible)
Emails security alerts to staff (irreversible)