STIX/TAXII Intelligence Skill

SkillSecurity

STIX/TAXII threat intelligence format and sharing

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the STIX/TAXII Intelligence Skill skill

What this skill tells your AI

The instructions your AI receives, as published by a5c-ai/babysitter in library/specializations/security-research/skills/stix-taxii/SKILL.md and read by ahel’s review.

Overview

This skill provides STIX/TAXII threat intelligence format creation, querying, and sharing capabilities.

Capabilities

Create STIX 2.1 bundles
Query TAXII servers
Generate threat reports
Create indicator relationships
Map to MITRE ATT&CK
Support OpenIOC format
Validate STIX syntax
Share intelligence feeds

Target Processes

threat-intelligence-research.js
malware-analysis.js
security-advisory-writing.js

Dependencies

stix2 library (Python)
taxii2-client
Python 3.x
TAXII server access (optional)

Usage Context

This skill is essential for:

Threat intelligence sharing
IOC standardization
Intelligence feed management
Threat report generation
Intelligence correlation

Integration Notes

Supports STIX 2.0 and 2.1
Can publish to TAXII servers
Integrates with MISP
Supports multiple IOC formats
Can generate human-readable reports

Signals

GitHub stars: 2k
Forks: 112
Last commit: Sep 2026

Advanced

Item type: skill
Key: stix-taxii-intelligence-skill
Source: github.com/a5c-ai/babysitter

github.com/a5c-ai/babysitter