[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ETK71AHZPXDA355EVARNE6":3,"skill-same:01M6ETK71AHZPXDA355EVARNE6":105},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":66,"commitSha":67,"skillDirectory":68,"forksCount":14,"repositoryHtmlUrl":69,"repositoryHomepageUrl":70,"ownerHtmlUrl":71,"ownerBlogUrl":6,"ownerDescription":72,"updatedAt":73,"install":74,"resources":87},"01M6ETK71AHZPXDA355EVARNE6","evaluating-threat-intelligence-platforms",null,"Evaluates and selects Threat Intelligence Platform (TIP) products based on organizational requirements including feed integration capability, STIX\u002FTAXII support, workflow automation, analyst interface, and total cost of ownership. Use when conducting a TIP procurement, migrating between TIP solutions, or assessing whether the current TIP meets program maturity requirements. Activates for requests involving ThreatConnect, MISP, OpenCTI, Anomali, EclecticIQ, or TIP procurement decisions.","henriquescastilho\u002Fmy-claude","henriquescastilho","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F153296945?v=4","01M6ESH7EXPXTH9CVQ4K16SRG8","Henrique Scheer","01M6ESH7JHEK2PTNNH4HEH787Z",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fevaluating-threat-intelligence-platforms\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"threat intelligence","intelligence","threat","evaluating threat intelligence platforms","interface","cybersecurity","de","analyst","cm","team","procurement","CTI-program","EclecticIQ","Anomali","TIP","STIX-TAXII","threat-intelligence","Workflow Automation","support","workflow","2026-11-10 10:12:30",false,"---\nname: evaluating-threat-intelligence-platforms\ndescription: 'Evaluates and selects Threat Intelligence Platform (TIP) products based\n  on organizational requirements including feed integration capability, STIX\u002FTAXII\n  support, workflow automation, analyst interface, and total cost of ownership. Use\n  when conducting a TIP procurement, migrating between TIP solutions, or assessing\n  whether the current TIP meets program maturity requirements. Activates for requests\n  involving ThreatConnect, MISP, OpenCTI, Anomali, EclecticIQ, or TIP procurement\n  decisions.\n\n  '\ndomain: cybersecurity\nsubdomain: threat-intelligence\ntags:\n- TIP\n- ThreatConnect\n- MISP\n- OpenCTI\n- Anomali\n- EclecticIQ\n- STIX-TAXII\n- CTI-program\n- procurement\nversion: 1.0.0\nauthor: team-cybersecurity\nlicense: Apache-2.0\nnist_csf:\n- ID.RA-01\n- ID.RA-05\n- DE.CM-01\n- DE.AE-02\nmitre_attack:\n- T1591\n- T1592\n- T1593\n- T1589\n---\n# Evaluating Threat Intelligence Platforms\n\n## When to Use\n\nUse this skill when:\n- Conducting a formal RFP or vendor evaluation for a TIP solution\n- Assessing whether the current TIP (e.g., MISP) needs to be replaced or augmented as the CTI program scales\n- Establishing evaluation criteria aligned to organizational maturity and budget\n\n**Do not use** this skill for evaluating feed quality independently of the TIP — feed evaluation is a separate workflow focused on data quality rather than platform capabilities.\n\n## Prerequisites\n\n- Documented CTI program requirements: team size, feed sources, integration targets, use cases\n- Budget range and procurement timeline\n- Technical staff who will administer the platform (Python\u002FAPI experience for open-source TIPs)\n- List of current and planned integrations (SIEM, SOAR, EDR, firewalls)\n\n## Workflow\n\n### Step 1: Define Evaluation Criteria\n\nStructure requirements into mandatory (M) and desired (D) categories:\n\n**Core TIP Functions**:\n- M: STIX 2.1 import\u002Fexport with TAXII 2.1 server\n- M: REST API for automated IOC ingestion and export\n- M: Indicator deduplication and TTL management\n- M: TLP classification enforcement\n- D: Built-in MITRE ATT&CK integration and technique tagging\n- D: Graph visualization of indicator relationships\n- D: Workflow automation for analyst triage\n\n**Integrations**:\n- M: SIEM integration (Splunk, Sentinel, QRadar) via syslog, API, or native connector\n- M: EDR integration for IOC push (CrowdStrike, Defender, SentinelOne)\n- D: SOAR integration (XSOAR, Splunk SOAR) for playbook triggers\n- D: Ticketing system (ServiceNow, Jira) for intelligence task tracking\n\n**Operational**:\n- M: Role-based access control with TLP-aware data segregation\n- M: Audit logging for all analyst actions\n- D: Multi-tenancy for MSSP use cases\n\n### Step 2: Evaluate Major TIP Options\n\n**MISP (Open Source)**:\n- Cost: Free (self-hosted infrastructure cost only)\n- Strengths: Largest community, 250+ modules, extensive ISAC usage, STIX 2.0 native\n- Weaknesses: Requires dedicated admin, limited visualization, UI dated\n- Best for: Budget-constrained teams with technical staff; government\u002FISAC sharing programs\n\n**OpenCTI (Open Source)**:\n- Cost: Free (self-hosted); paid SaaS at ~$3,000–$15,000\u002Fyear\n- Strengths: Native STIX 2.1, graph visualization, ATT&CK integration, modern API\n- Weaknesses: Resource-intensive deployment (Elasticsearch, MinIO required)\n- Best for: Teams wanting open source with modern UX; SOC\u002FCTI integration focus\n\n**ThreatConnect (Commercial)**:\n- Cost: $50,000–$500,000\u002Fyear depending on scale\n- Strengths: End-to-end CTI lifecycle, playbook automation, TC Exchange marketplace, analyst workflow\n- Weaknesses: High cost; complex implementation; best value at larger scale\n- Best for: Mature enterprise CTI programs; MSSPs; red team\u002Fblue team integration\n\n**Anomali ThreatStream (Commercial)**:\n- Cost: $30,000–$200,000\u002Fyear\n- Strengths: Strong feed aggregation, Splunk-native integration, extensive pre-built connectors\n- Weaknesses: Graph visualization weaker than OpenCTI; UI refresh lagging\n- Best for: Splunk-heavy environments; teams prioritizing feed volume over analysis workflows\n\n**EclecticIQ Platform (Commercial)**:\n- Cost: $40,000–$300,000\u002Fyear\n- Strengths: STIX 2.1 native, collaborative intelligence workbench, strong European customer base\n- Weaknesses: Smaller partner ecosystem than ThreatConnect\n- Best for: Teams with MITRE ATT&CK-centric workflows; EMEA-focused organizations\n\n### Step 3: Conduct Proof of Concept\n\nRequest 30-day PoC from finalists. Test:\n1. Feed onboarding: Can your top 5 feeds be ingested within 4 hours?\n2. SIEM integration: Can enriched IOCs push to your SIEM in \u003C5 minutes?\n3. ATT&CK mapping: Can analysts tag indicators with ATT&CK techniques efficiently?\n4. Report generation: Can the platform produce a tactical IOC bulletin with one click?\n5. API performance: Can the REST API handle 10,000 indicator queries per day?\n\n### Step 4: Score and Select\n\nUse weighted scoring matrix (weight each criterion by organizational priority):\n```\nCriterion                 Weight   Vendor A   Vendor B\nSTIX 2.1 compliance       20%      95         85\nSIEM integration          25%      90         70\nATT&CK mapping            15%      85         95\nCost (inverse)            20%      60         90\nUI\u002Fanalyst experience     10%      80         75\nVendor support quality    10%      85         80\nTOTAL                     100%     82.0       81.5\n```\n\n### Step 5: Implementation and Onboarding Planning\n\nPlan 90-day implementation:\n- Week 1–2: Infrastructure deployment (cloud or on-prem)\n- Week 3–4: Feed onboarding and deduplication tuning\n- Week 5–6: SIEM\u002FSOAR integration and testing\n- Week 7–8: Analyst workflow configuration and training\n- Week 9–12: Operational validation and go-live\n\n## Key Concepts\n\n| Term | Definition |\n|------|-----------|\n| **TIP** | Threat Intelligence Platform — software for collecting, processing, analyzing, and disseminating cyber threat intelligence |\n| **TAXII Server** | Component of a TIP that serves STIX bundles to consuming systems on request |\n| **TC Exchange** | ThreatConnect's commercial marketplace for pre-built feed integrations and app connectors |\n| **Multi-tenancy** | TIP capability to serve multiple organizational units or customers with isolated data environments |\n| **Deduplication** | Process of identifying and merging duplicate indicators within a TIP to reduce analyst noise |\n\n## Tools & Systems\n\n- **MISP**: Open-source TIP used by 6,000+ organizations; strongest ISAC\u002Fgovernment community integration\n- **OpenCTI**: Modern open-source TIP with native STIX 2.1 and graph-based analysis\n- **ThreatConnect**: Enterprise commercial TIP with lifecycle management and SOAR playbook integration\n- **Anomali ThreatStream**: Commercial TIP with strong Splunk ecosystem integration\n- **EclecticIQ**: Commercial TIP with ATT&CK-centric workflow design\n\n## Common Pitfalls\n\n- **Selecting TIP before defining requirements**: Technology selection before use case definition leads to expensive mismatches.\n- **Underestimating administration burden**: MISP and OpenCTI require dedicated admin time (minimum 0.25 FTE); budget accordingly.\n- **Ignoring data migration costs**: Moving historical intelligence from one TIP to another is costly and often impractical for legacy systems.\n- **Not testing SIEM integration in PoC**: TIP value depends heavily on downstream integration quality; always test SIEM\u002FSOAR connectivity during evaluation.\n","# Evaluating Threat Intelligence Platforms\n\n## When to Use\n\nUse this skill when:\n- Conducting a formal RFP or vendor evaluation for a TIP solution\n- Assessing whether the current TIP (e.g., MISP) needs to be replaced or augmented as the CTI program scales\n- Establishing evaluation criteria aligned to organizational maturity and budget\n\n**Do not use** this skill for evaluating feed quality independently of the TIP — feed evaluation is a separate workflow focused on data quality rather than platform capabilities.\n\n## Prerequisites\n\n- Documented CTI program requirements: team size, feed sources, integration targets, use cases\n- Budget range and procurement timeline\n- Technical staff who will administer the platform (Python\u002FAPI experience for open-source TIPs)\n- List of current and planned integrations (SIEM, SOAR, EDR, firewalls)\n\n## Workflow\n\n### Step 1: Define Evaluation Criteria\n\nStructure requirements into mandatory (M) and desired (D) categories:\n\n**Core TIP Functions**:\n- M: STIX 2.1 import\u002Fexport with TAXII 2.1 server\n- M: REST API for automated IOC ingestion and export\n- M: Indicator deduplication and TTL management\n- M: TLP classification enforcement\n- D: Built-in MITRE ATT&CK integration and technique tagging\n- D: Graph visualization of indicator relationships\n- D: Workflow automation for analyst triage\n\n**Integrations**:\n- M: SIEM integration (Splunk, Sentinel, QRadar) via syslog, API, or native connector\n- M: EDR integration for IOC push (CrowdStrike, Defender, SentinelOne)\n- D: SOAR integration (XSOAR, Splunk SOAR) for playbook triggers\n- D: Ticketing system (ServiceNow, Jira) for intelligence task tracking\n\n**Operational**:\n- M: Role-based access control with TLP-aware data segregation\n- M: Audit logging for all analyst actions\n- D: Multi-tenancy for MSSP use cases\n\n### Step 2: Evaluate Major TIP Options\n\n**MISP (Open Source)**:\n- Cost: Free (self-hosted infrastructure cost only)\n- Strengths: Largest community, 250+ modules, extensive ISAC usage, STIX 2.0 native\n- Weaknesses: Requires dedicated admin, limited visualization, UI dated\n- Best for: Budget-constrained teams with technical staff; government\u002FISAC sharing programs\n\n**OpenCTI (Open Source)**:\n- Cost: Free (self-hosted); paid SaaS at ~$3,000–$15,000\u002Fyear\n- Strengths: Native STIX 2.1, graph visualization, ATT&CK integration, modern API\n- Weaknesses: Resource-intensive deployment (Elasticsearch, MinIO required)\n- Best for: Teams wanting open source with modern UX; SOC\u002FCTI integration focus\n\n**ThreatConnect (Commercial)**:\n- Cost: $50,000–$500,000\u002Fyear depending on scale\n- Strengths: End-to-end CTI lifecycle, playbook automation, TC Exchange marketplace, analyst workflow\n- Weaknesses: High cost; complex implementation; best value at larger scale\n- Best for: Mature enterprise CTI programs; MSSPs; red team\u002Fblue team integration\n\n**Anomali ThreatStream (Commercial)**:\n- Cost: $30,000–$200,000\u002Fyear\n- Strengths: Strong feed aggregation, Splunk-native integration, extensive pre-built connectors\n- Weaknesses: Graph visualization weaker than OpenCTI; UI refresh lagging\n- Best for: Splunk-heavy environments; teams prioritizing feed volume over analysis workflows\n\n**EclecticIQ Platform (Commercial)**:\n- Cost: $40,000–$300,000\u002Fyear\n- Strengths: STIX 2.1 native, collaborative intelligence workbench, strong European customer base\n- Weaknesses: Smaller partner ecosystem than ThreatConnect\n- Best for: Teams with MITRE ATT&CK-centric workflows; EMEA-focused organizations\n\n### Step 3: Conduct Proof of Concept\n\nRequest 30-day PoC from finalists. Test:\n1. Feed onboarding: Can your top 5 feeds be ingested within 4 hours?\n2. SIEM integration: Can enriched IOCs push to your SIEM in \u003C5 minutes?\n3. ATT&CK mapping: Can analysts tag indicators with ATT&CK techniques efficiently?\n4. Report generation: Can the platform produce a tactical IOC bulletin with one click?\n5. API performance: Can the REST API handle 10,000 indicator queries per day?\n\n### Step 4: Score and Select\n\nUse weighted scoring matrix (weight each criterion by organizational priority):\n```\nCriterion                 Weight   Vendor A   Vendor B\nSTIX 2.1 compliance       20%      95         85\nSIEM integration          25%      90         70\nATT&CK mapping            15%      85         95\nCost (inverse)            20%      60         90\nUI\u002Fanalyst experience     10%      80         75\nVendor support quality    10%      85         80\nTOTAL                     100%     82.0       81.5\n```\n\n### Step 5: Implementation and Onboarding Planning\n\nPlan 90-day implementation:\n- Week 1–2: Infrastructure deployment (cloud or on-prem)\n- Week 3–4: Feed onboarding and deduplication tuning\n- Week 5–6: SIEM\u002FSOAR integration and testing\n- Week 7–8: Analyst workflow configuration and training\n- Week 9–12: Operational validation and go-live\n\n## Key Concepts\n\n| Term | Definition |\n|------|-----------|\n| **TIP** | Threat Intelligence Platform — software for collecting, processing, analyzing, and disseminating cyber threat intelligence |\n| **TAXII Server** | Component of a TIP that serves STIX bundles to consuming systems on request |\n| **TC Exchange** | ThreatConnect's commercial marketplace for pre-built feed integrations and app connectors |\n| **Multi-tenancy** | TIP capability to serve multiple organizational units or customers with isolated data environments |\n| **Deduplication** | Process of identifying and merging duplicate indicators within a TIP to reduce analyst noise |\n\n## Tools & Systems\n\n- **MISP**: Open-source TIP used by 6,000+ organizations; strongest ISAC\u002Fgovernment community integration\n- **OpenCTI**: Modern open-source TIP with native STIX 2.1 and graph-based analysis\n- **ThreatConnect**: Enterprise commercial TIP with lifecycle management and SOAR playbook integration\n- **Anomali ThreatStream**: Commercial TIP with strong Splunk ecosystem integration\n- **EclecticIQ**: Commercial TIP with ATT&CK-centric workflow design\n\n## Common Pitfalls\n\n- **Selecting TIP before defining requirements**: Technology selection before use case definition leads to expensive mismatches.\n- **Underestimating administration burden**: MISP and OpenCTI require dedicated admin time (minimum 0.25 FTE); budget accordingly.\n- **Ignoring data migration costs**: Moving historical intelligence from one TIP to another is costly and often impractical for legacy systems.\n- **Not testing SIEM integration in PoC**: TIP value depends heavily on downstream integration quality; always test SIEM\u002FSOAR connectivity during evaluation.\n",{"name":5,"tags":49,"author":53,"domain":29,"license":15,"version":54,"nist_csf":55,"subdomain":40,"description":60,"mitre_attack":61},[38,50,51,52,37,36,39,35,34],"ThreatConnect","MISP","OpenCTI","team-cybersecurity","1.0.0",[56,57,58,59],"ID.RA-01","ID.RA-05","DE.CM-01","DE.AE-02","Evaluates and selects Threat Intelligence Platform (TIP) products based on organizational requirements including feed integration capability, STIX\u002FTAXII support, workflow automation, analyst interface, and total cost of ownership. Use when conducting a TIP procurement, migrating between TIP solutions, or assessing whether the current TIP meets program maturity requirements. Activates for requests involving ThreatConnect, MISP, OpenCTI, Anomali, EclecticIQ, or TIP procurement decisions.\n",[62,63,64,65],"T1591","T1592","T1593","T1589","main","7925716f065257435fdb12e97f7e52842147d5ad",".claude\u002Fskills\u002Fevaluating-threat-intelligence-platforms","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude","https:\u002F\u002Fclaude.com\u002Fclaude-code","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho","Software · Applied AI · Quantitative Modeling · Building with Claude.","2026-06-10 12:24:46",{"source":8,"skillName":5,"commands":75,"prompt":85,"zipAvailable":86},[76,79,82],{"tool":77,"command":78},"npx","npx skills add henriquescastilho\u002Fmy-claude --skill evaluating-threat-intelligence-platforms",{"tool":80,"command":81},"bunx","bunx skills add henriquescastilho\u002Fmy-claude --skill evaluating-threat-intelligence-platforms",{"tool":83,"command":84},"pnpm","pnpm dlx skills add henriquescastilho\u002Fmy-claude --skill evaluating-threat-intelligence-platforms","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fevaluating-threat-intelligence-platforms\u002FSKILL.md",true,[88,93,99],{"path":89,"resourceType":89,"resourceTypeDesc":90,"sizeBytes":91,"sourceHtmlUrl":92},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fevaluating-threat-intelligence-platforms\u002FLICENSE",{"path":94,"resourceType":95,"resourceTypeDesc":96,"sizeBytes":97,"sourceHtmlUrl":98},"references\u002Fapi-reference.md","REFERENCE","参考文档",2780,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fevaluating-threat-intelligence-platforms\u002Freferences\u002Fapi-reference.md",{"path":100,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":103,"sourceHtmlUrl":104},"scripts\u002Fagent.py","SCRIPT","脚本",9491,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fevaluating-threat-intelligence-platforms\u002Fscripts\u002Fagent.py",[106,147,156,165,187,213],{"skillNo":107,"name":108,"nameZh":6,"description":109,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":110,"licenseFileUrl":6,"sourceHtmlUrl":111,"categories":112,"keywords":127,"publishedAt":44},"01M6F0B6XPQ65AX2X0DWK8KT3E","markitdown","Convert files and office documents to Markdown. Supports PDF, DOCX, PPTX, XLSX, images (with OCR), audio (with transcription), HTML, CSV, JSON, XML, ZIP, YouTube URLs, EPubs and more.","MIT","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[113,116,119,122],{"categoryNo":114,"categoryName":115,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":117,"categoryName":118,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":120,"categoryName":121,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000004","电子表格",{"categoryNo":123,"categoryName":124,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000034","行政与办公人员","PROFESSION","适用职业",[108,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],"docx","PDF","pptx","xlsx","documents","csv","ocr","Audio","Bash","markdown","convert","read","write","edit","html","images","files","youtube","with",{"skillNo":148,"name":108,"nameZh":6,"description":109,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":110,"licenseFileUrl":6,"sourceHtmlUrl":149,"categories":150,"keywords":155,"publishedAt":44},"01M6F06SBHR9F0SDWE282Y8075","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fscientific_writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[151,152,153,154],{"categoryNo":114,"categoryName":115,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":117,"categoryName":118,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":120,"categoryName":121,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":123,"categoryName":124,"taxonomyType":125,"taxonomyTypeDesc":126},[108,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],{"skillNo":157,"name":108,"nameZh":6,"description":109,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":110,"licenseFileUrl":6,"sourceHtmlUrl":158,"categories":159,"keywords":164,"publishedAt":44},"01M6F02D4R14EJAPBWVDF9J9VQ","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[160,161,162,163],{"categoryNo":114,"categoryName":115,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":117,"categoryName":118,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":120,"categoryName":121,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":123,"categoryName":124,"taxonomyType":125,"taxonomyTypeDesc":126},[108,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],{"skillNo":166,"name":167,"nameZh":6,"description":168,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":110,"licenseFileUrl":6,"sourceHtmlUrl":169,"categories":170,"keywords":171,"publishedAt":44},"01M6F000KS6YB4MKS774G4R8ND","zarr-python","Chunked N-D arrays for cloud storage. Compressed arrays, parallel I\u002FO, S3\u002FGCS integration, NumPy\u002FDask\u002FXarray compatible, for large-scale scientific computing pipelines.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fzarr-python\u002FSKILL.md",[],[172,173,174,175,176,177,178,179,180,181,182,183,184,185,186],"python","zarr python","storage","integration","s3","gcs","cloud","dask","parallel","pipelines","arrays","numpy","scientific computing","scale","scientific",{"skillNo":188,"name":189,"nameZh":6,"description":190,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":110,"licenseFileUrl":6,"sourceHtmlUrl":191,"categories":192,"keywords":194,"publishedAt":44},"01M6EZZJWFXM1GR78KTW6J0DN8","what-if-oracle","Run structured What-If scenario analysis with multi-branch possibility exploration. Use this skill when the user asks speculative questions like \"what if...\", \"what would happen if...\", \"what are the possibilities\", \"explore scenarios\", \"scenario analysis\", \"possibility space\", \"what could go wrong\", \"best case \u002F worst case\", \"risk analysis\", \"contingency planning\", \"strategic options\", or any question about uncertain futures. Also trigger when the user faces a fork-in-the-road decision, wants to stress-test an idea, or needs to think through consequences before committing.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fwhat-if-oracle\u002FSKILL.md",[193],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[195,196,197,198,199,200,201,202,203,204,205,139,140,206,207,208,209,210,211,212],"oracle","what if oracle","go","run","ux","futures","analysis","explore","decision","branch","question","idea","exploration","options","stress-test","strategies","scenario","stress",{"skillNo":214,"name":215,"nameZh":6,"description":216,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":110,"licenseFileUrl":6,"sourceHtmlUrl":217,"categories":218,"keywords":229,"publishedAt":44},"01M6EZZCXAEB49RXGQCJX5E8GB","venue-templates","Access comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fvenue-templates\u002FSKILL.md",[219,222,225,226],{"categoryNo":220,"categoryName":221,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":223,"categoryName":224,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":227,"categoryName":228,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000036","内容创作者",[230,231,232,233,234,235,236,237,136,238,139,140,141,239,240,241,242,243,186,244],"templates","venue templates","research","guidelines","NeurIPS","ICML","LaTeX","science","access","proposals","Academic","requirements","formatting","journal","chi"]