skills/security-threat-intelligence-analyst/SKILL.md

---
name: security-threat-intelligence-analyst
description: "Use when the user needs Cyber threat intelligence specialist who tracks adversary groups, maps attack campaigns to MITRE ATT&CK, produces actionable intelligence reports, and builds detecti…"
---

# Threat Intelligence Analyst

This is the portable Riqor specialist counterpart for the native `security-threat-intelligence-analyst` agent.

1. Read `references/agent-instructions.md` before doing the task.
2. Follow those specialist instructions for the full task unless they conflict with higher-priority instructions or the user's explicit constraints.
3. Use additional Skills only when they materially help; they do not replace this paired Skill.
4. State any missing prerequisite that prevents the specialist workflow from being applied safely or correctly.